Lucene search
+L

6403 matches found

Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.14 views

PT-2026-36386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dt2815 driver crashes when attached to I/O ports without actual hardware present. This occurs because users can attach the driver to arbitrary I/O addresses via the 'COMEDI DEVCONFIG...

4.7CVSS5.5AI score0.00089EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the usb ulpi driver releasing ulpi again after calling putdevice in the ulpiregisterinterface error path,...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/01 12:00 a.m.10 views

PT-2026-36396

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mpu3050 gyro driver. This occurs because the iio device register function is not called at the end of the probe function. Recommendations Move the iio devi...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/01 12:00 a.m.16 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly placed iiodeviceregister in the iio gyro mpu3050 driver, which could lead to a race condition...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/04/30 8:55 p.m.6 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01283EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/30 8:55 p.m.12 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01283EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/30 8:55 p.m.8 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01283EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/30 8:55 p.m.7 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the RegisterTemplates process. An attacker can access sensitive environment variables and configuration data by sending unauthenticated GET requests to the affected API...

8.7CVSS5.8AI score0.01283EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/29 7:24 p.m.45 views

CVE-2018-25307 SysGauge Pro 4.6.12 Local Buffer Overflow SEH

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS0.0015EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/29 7:24 p.m.13 views

EUVD-2018-21828

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/29 7:24 p.m.18 views

CVE-2018-25302

CVE-2018-25302 affects Allok AVI to DVD SVCD VCD Converter 4.0.1217. The vulnerability is an SEH-based buffer overflow in the License Name field that enables local code execution. An attacker can craft a payload consisting of junk data, NSEH bypass, an SEH handler address, and shellcode, paste it...

8.5CVSS6.3AI score0.00157EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/29 7:15 p.m.10 views

EUVD-2026-26282

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument studentid/fullname/section/username results ...

5.3CVSS3.6AI score0.0032EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/29 7:15 p.m.18 views

CVE-2026-7401

CVE-2026-7401 affects SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The vulnerability targets the Registration component, specifically /index.php?action=register, where manipulation of the arguments student_id, full_name, section, or username enables cross-site scr...

5.3CVSS3.7AI score0.0032EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.16 views

SourceCodester CET Automated Grading System with AI Predictive Analytics 跨站脚本漏洞

SourceCodester CET Automated Grading System with AI Predictive Analytics is an open-source English language assessment system based on artificial intelligence predictive analytics, developed by SourceCodester. Version 1.0 of the SourceCodester CET Automated Grading System with AI Predictive...

5.3CVSS5.6AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.11 views

PT-2026-35990

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/28 12:00 a.m.32 views

EUVD-2026-26141

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.7AI score0.0037EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.13 views

PT-2026-35819

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.7AI score0.0037EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/04/28 12:00 a.m.8 views

CVE-2026-37750

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.8AI score0.0037EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/28 12:00 a.m.8 views

CVE-2026-37750

A reflected Cross-Site Scripting XSS vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php...

5.8AI score0.0037EPSS
SaveExploits1References4
OSV
OSV
added 2026/04/27 5:32 p.m.11 views

CVE-2026-31687 gpio: omap: do not register driver in probe()

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe Commit 11a78b794496 "ARM: OMAP: MPUIO wake updates" registers the omapmpuiodriver from omapmpuioinit, which is called from omapgpioprobe. However, it neither makes sense to register...

5.9AI score
SaveExploits0References14
Rows per page
Query Builder