Lucene search
+L

26 matches found

OSV
OSV
•added 2026/10/06 9:18 a.m.•6 views

DEBIAN-CVE-2026-98190

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

6AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/06 9:18 a.m.•5 views

AZL-106056 CVE-2026-98190 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

5.9AI score0.00184EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/06 9:18 a.m.•8 views

CVE-2026-98190

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

0.00184EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/10/06 9:18 a.m.•6 views

CVE-2026-98190

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

5.9AI score0.00184EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/10/06 8:44 a.m.•23 views

CVE-2026-98190 wifi: wilc1000: fix out-of-bounds read in P2P public action frames

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

0.00184EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/06 8:44 a.m.•8 views

EUVD-2026-93118

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

5.9AI score0.00184EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/06 8:44 a.m.•11 views

CVE-2026-98190

The Linux kernel (specifically the wilc1000 driver) contains an out-of-bounds read vulnerability in the processing of P2P public action frames . The issue arises because ieee80211_is_public_action() only verifies a minimum length of 25 bytes, while the subsequent parsing in wilc_wfi_p2p_rx() and ...

5.9AI score0.00184EPSS
SaveExploits0References8
OSV
OSV
•added 2026/10/06 8:44 a.m.•6 views

CVE-2026-98190 wifi: wilc1000: fix out-of-bounds read in P2P public action frames

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

6AI score
SaveExploits0References11
Debian CVE
Debian CVE
•added 2026/10/06 8:44 a.m.•11 views

CVE-2026-98190

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

6AI score0.00184EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•4 views

PT-2026-106519

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilc wfi p2p rx and mgmt tx start parsing a frame once ieee80211 is public action returns true. That helper only verifies the frame is long enough for the action...

6AI score0.00184EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•3 views

CVE-2026-98190: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...

5.9AI score0.00184EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2026-98190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That...

5.9AI score0.00184EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:35 p.m.•27 views

CVE-2026-5234

The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2. The vulnerability exists because the OsStripeConnectController::createpaymentintentfortransaction action is registered as a public action no authentication required an...

5.3CVSS5.5AI score0.00635EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/17 6:31 a.m.•24 views

EUVD-2026-23356

The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2. The vulnerability exists because the OsStripeConnectController::createpaymentintentfortransaction action is registered as a public action no authentication required an...

5.3CVSS5.8AI score0.00635EPSS
SaveExploits0References11
Patchstack
Patchstack
•added 2026/01/27 3:01 a.m.•18 views

WordPress WP Directory Kit plugin <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action vulnerability

Unauthenticated Email Exposure via wdkpublicaction vulnerability discovered by Sarawut Poolkhet MisterHelloz in WordPress Plugin WP Directory Kit versions = 1.4.9...

5.3CVSS5.9AI score0.00725EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/25 3:19 p.m.•25 views

CVE-2025-13920

The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdkpublicaction AJAX handler. This makes it possible for unauthenticated attackers to extract email addresses for users with Directory Kit-specific user...

5.3CVSS5.4AI score0.00725EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/24 12:27 p.m.•55 views

CVE-2025-13920

The CVE-2025-13920 entry concerns the WP Directory Kit WordPress plugin, specifically versions up to and including 1.4.9. Affected component: the wdk_public_action AJAX handler, which allows unauthenticated access to sensitive information. The connected Nuclei template confirms unauthenticated em...

5.3CVSS5.8AI score0.00725EPSS
SaveIn wildExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/24 12:27 p.m.•9 views

CVE-2025-13920 WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action

The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdkpublicaction AJAX handler. This makes it possible for unauthenticated attackers to extract email addresses for users with Directory Kit-specific user...

5.3CVSS5.8AI score0.00725EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/24 12:27 p.m.•6 views

CVE-2025-13920

The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the wdkpublicaction AJAX handler. This makes it possible for unauthenticated attackers to extract email addresses for users with Directory Kit-specific user...

5.3CVSS5.9AI score0.00725EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 8:18 a.m.•15 views

CVE-2024-10937

The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.58 via the wpajaxnoprivrelatedpostajaxgetpostids AJAX action. This makes it possible for...

5.3CVSS6AI score0.0036EPSS
SaveExploits0References1
Rows per page
Query Builder