Lucene search
+L

2029 matches found

BDU FSTEC
BDU FSTEC
added 2026/03/13 12:0 a.m.9 views

The vulnerability of the OnBeacon() function in the drivers/staging/rtl8723bs/core/rtw_mlme_ext.c module allows unauthorized access to protected information by a remote attacker. This vulnerability enables unauthorized access to sensitive data.

The vulnerability of the OnBeacon function in the drivers/staging/rtl8723bs/core/rtwmlmeext.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthoriz...

3.5CVSS5.9AI score0.0024EPSS
SaveExploits0References11Affected Software3
ATTACKERKB
ATTACKERKB
added 2026/03/10 10:49 p.m.10 views

CVE-2025-22444

Exposure of resource to wrong sphere in the UEFI PdaSmm module for some IntelR reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...

5.6CVSS5.7AI score0.00103EPSS
SaveExploits0References2
Redos
Redos
added 2026/03/04 12:0 a.m.10 views

ROS-20260304-73-0029

A vulnerability in the dbMount function of the Linux kernel is related to reading memory outside of the allocated buffer. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information...

7.8CVSS7.2AI score0.00161EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/03/02 12:0 a.m.12 views

The vulnerability of the Odoo Community Edition CRM system and the Odoo Enterprise Edition ERP system, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to deficiencies in access control. Exploiting these vulnerabilities can allow unauthorized individuals to gain unauthorized access to protected information...

8.5CVSS5.8AI score0.00668EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2026/02/26 9:28 p.m.4 views

DEBIAN-CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

8.7CVSS5.4AI score0.00468EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/26 9:28 p.m.8 views

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

8.7CVSS5.9AI score0.00468EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/26 8:18 p.m.5 views

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

8.7CVSS5.8AI score0.00468EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/02/26 8:18 p.m.7 views

CVE-2026-22205

SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive...

8.7CVSS5.3AI score0.00468EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/13 1:31 a.m.12 views

CVE-2026-20623

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5CVSS5.5AI score0.00127EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/02/12 12:0 a.m.9 views

The vulnerability of the CS-Cart Multi-Vendor electronic shopping platform’s software lies in its ability to bypass authentication using a user-controlled key, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...

5.5CVSS5.9AI score
SaveExploits0Affected Software1
OSV
OSV
added 2026/02/11 11:16 p.m.6 views

CVE-2026-20630

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5CVSS5.8AI score0.00118EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/11 11:16 p.m.9 views

CVE-2026-20623

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5CVSS5.7AI score0.00127EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/11 11:16 p.m.9 views

CVE-2026-20623

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5CVSS0.00127EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/11 10:59 p.m.13 views

CVE-2026-20648

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices...

5.5CVSS5.4AI score0.00127EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/11 10:58 p.m.10 views

EUVD-2026-5925

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5CVSS5.5AI score0.00127EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/11 10:58 p.m.6 views

CVE-2026-20623

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...

5.5AI score0.00127EPSS
SaveExploits0References1
Redos
Redos
added 2026/02/11 12:0 a.m.8 views

ROS-20260211-73-0008

A vulnerability in the miinwayrestart function of the Linux kernel is related to incorrect input data validation. Exploitation of the vulnerability may allow an intruder to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00156EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/02/06 12:0 a.m.7 views

The vulnerability of the l2cap_connect_create_rsp() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the l2capconnectcreatersp function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

8CVSS6.8AI score0.00336EPSS
SaveExploits0References23Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/01/30 12:0 a.m.22 views

The vulnerability of the browser’s Background Fetch API programming interface in Google Chrome allows attackers to disclose protected information.

The vulnerability of the Google Chrome browser’s Background Fetch API programming interface is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to disclose sensitive information through a specially created HTM...

7.8CVSS7.1AI score0.00224EPSS
SaveExploits1References11Affected Software4
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.7 views

PT-2026-8220

Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description The Grafana monitoring and observation platform contains a flaw due to insufficient access control within a correlation function. Remote attackers may be able to gain unauthorized access to...

3.6CVSS5.8AI score0.00204EPSS
SaveExploits0References8
Rows per page
Query Builder