Lucene search
+L

43523 matches found

NVD
NVD
added 2026/09/01 2:17 p.m.8 views

CVE-2026-51751

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

9.8CVSS0.00442EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/01 12:40 p.m.9 views

CVE-2026-80685

A flaw was found in the Linux kernel's memory management subsystem. The snapshotpage function attempts to read memory that may not exist when handling certain memory structures order-1 folios during specific memory operations, such as dynamic logical partitioning DLPAR memory removal. This...

7.1CVSS5.8AI score0.00124EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/01 10:38 a.m.7 views

CVE-2026-80608

A flaw was found in the Linux kernel. This vulnerability, located in the accel/amdxdna component, is a use-after-free issue. It occurs due to a race condition during device removal when forceiova mode is enabled, where a freed memory region can still be accessed. A local attacker could potentiall...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/01 10:38 a.m.8 views

CVE-2026-80625

A flaw was found in the Linux kernel's RDMA/hns component. During concurrent driver removal and reset operations, bonding resources are incorrectly released and then re-allocated, leading to a memory leak. This memory leak can potentially cause a kernel panic, resulting in a Denial of Service DoS...

5.5CVSS5.8AI score0.00155EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 12:00 a.m.35 views

CVE-2026-51751

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reboot the system via sending a crafted MQTT message to the csbroker component...

0.00442EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/31 8:17 p.m.7 views

CVE-2026-51731

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

9.1CVSS0.00364EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/31 10:09 a.m.9 views

CVE-2026-80653

A flaw was found in the Linux kernel's hisisas driver. A local attacker or privileged user could trigger a kernel warning by simultaneously performing a link reset on a remote physical layer PHY device and removing the SAS driver. This race condition can lead to system instability or a denial of...

8.4CVSS5.9AI score0.00142EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/31 7:09 a.m.15 views

Security Bulletin:IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

Summary WmServiceMock is bundled with IBM webMethods Integration Server. Remediation steps are provided below CVE-2026-12118 Vulnerability Details CVEID:CVE-2026-12118 DESCRIPTION: IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary...

9.8CVSS6.2AI score0.00567EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/08/31 12:00 a.m.9 views

EUVD-2026-68755

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

5.9AI score0.00364EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/31 12:00 a.m.16 views

CVE-2026-51731

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 is affected by an incorrect access control flaw in the delVlanCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to remove VLAN entries from the device. The vulnerability is scored CVSS 9.1 (CRITICAL...

9.1CVSS5.9AI score0.00364EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-80625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in...

5.4AI score0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-80608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is...

8.8CVSS5.5AI score0.0012EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/31 12:00 a.m.35 views

CVE-2026-51731

Incorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove VLAN entries via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00364EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/08/28 4:36 p.m.8 views

SUSE CVE-2026-80608

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/28 10:49 a.m.10 views

EUVD-2026-67583

SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...

5.3CVSS6AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 8:16 a.m.44 views

CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker t...

9.8CVSS0.00379EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/28 8:16 a.m.11 views

CVE-2026-80653

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...

8.4CVSS0.00142EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/28 8:16 a.m.10 views

AZL-98090 CVE-2026-80654 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox channel is cleaned up when the rxchan is NULL due to incorrect condition...

5.8AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/28 8:16 a.m.10 views

AZL-98069 CVE-2026-80653 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...

8.4CVSS5.9AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/28 8:16 a.m.8 views

CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

0.00155EPSS
SaveExploits0References2
Rows per page
Query Builder