Lucene search
+L

7031 matches found

Positive Technologies
Positive Technologies
•added 2026/05/01 12:00 a.m.•14 views

PT-2026-36396

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mpu3050 gyro driver. This occurs because the iio device register function is not called at the end of the probe function. Recommendations Move the iio devi...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/01 12:00 a.m.•19 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly placed iiodeviceregister in the iio gyro mpu3050 driver, which could lead to a race condition...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/04/30 8:55 p.m.•7 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01469EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/30 8:55 p.m.•13 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01469EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/30 8:55 p.m.•9 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01469EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/30 8:55 p.m.•8 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01469EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/29 7:24 p.m.•18 views

EUVD-2018-21828

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/29 7:24 p.m.•50 views

CVE-2018-25307 SysGauge Pro 4.6.12 Local Buffer Overflow SEH

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS0.0015EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/29 7:24 p.m.•22 views

CVE-2018-25302

CVE-2018-25302 affects Allok AVI to DVD SVCD VCD Converter 4.0.1217. The vulnerability is an SEH-based buffer overflow in the License Name field that enables local code execution. An attacker can craft a payload consisting of junk data, NSEH bypass, an SEH handler address, and shellcode, paste it...

8.5CVSS6.3AI score0.00157EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/29 7:15 p.m.•17 views

EUVD-2026-26282

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument studentid/fullname/section/username results ...

5.3CVSS3.6AI score0.00449EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/29 7:15 p.m.•28 views

CVE-2026-7401

CVE-2026-7401 affects SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The vulnerability targets the Registration component, specifically /index.php?action=register, where manipulation of the arguments student_id, full_name, section, or username enables cross-site scr...

5.3CVSS3.7AI score0.00449EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•21 views

SourceCodester CET Automated Grading System with AI Predictive Analytics 跨站脚本漏洞

SourceCodester CET Automated Grading System with AI Predictive Analytics is an open-source English language assessment system based on artificial intelligence predictive analytics, developed by SourceCodester. Version 1.0 of the SourceCodester CET Automated Grading System with AI Predictive...

5.3CVSS5.6AI score0.00449EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•16 views

PT-2026-35990

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/29 12:00 a.m.•14 views

The vulnerability of the ath11k_mhi_register() function in the drivers/net/wireless/ath/ath11k/mhi.c module of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath11kmhiregister function in the drivers/net/wireless/ath/ath11k/mhi.c module of the Atheros/Qualcomm wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability...

7CVSS6AI score0.00154EPSS
SaveExploits0References11Affected Software3
EUVD
EUVD
•added 2026/04/28 12:00 a.m.•39 views

EUVD-2026-26141

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.7AI score0.00438EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•16 views

PT-2026-35819

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.7AI score0.00438EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/04/28 12:00 a.m.•10 views

CVE-2026-37750

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.8AI score0.00438EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/04/28 12:00 a.m.•10 views

CVE-2026-37750

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.8AI score0.00438EPSS
SaveExploits1References4
OSV
OSV
•added 2026/04/27 5:32 p.m.•14 views

CVE-2026-31687 gpio: omap: do not register driver in probe()

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

5.9AI score
SaveExploits0References14
BDU FSTEC
BDU FSTEC
•added 2026/04/27 12:00 a.m.•8 views

The vulnerability of the mISDN_register_device() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mISDNregisterdevice function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

5.5CVSS6.6AI score0.00204EPSS
SaveExploits0References12Affected Software3
Rows per page
Query Builder