Lucene search
+L

125929 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.33 views

PT-2026-43783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the power supply changed function. The problem occurs because the devm variant for requesting an IRQ is used before the devm variant for allocating or...

7.8CVSS5.4AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.16 views

PT-2026-43736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the probe function where request irq is called before the power supply handle is allocated or registered. If an interrupt occurs between these two calls, the...

5.5CVSS5.5AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-43948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory corruption issue exists in the Linux kernel crypto acomp component. The function acomp save req incorrectly stores the address of the chain member &req-chain in req-base.data...

7.8CVSS6.1AI score0.00166EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 4.2.2 contained a security vulnerability. This vulnerability stemmed from a parser type confusion in the NRF’s OAuth2 token endpoint, which could potentially cause a panic due to a single...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.31 views

PT-2026-44033

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b b d and earlier allows attackers to resume failed Multijob builds...

5.7AI score0.00146EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:00 a.m.11 views

CVE-2026-30498

A Cross-Site Request Forgery CSRF vulnerability was discovered in the delete.php endpoint of Jason2605 AdminPanel 4.0...

5.8AI score0.00097EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-43535

The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the search simple fields options function in functions admin.php. This makes it possible for unauthenticated...

4.3CVSS5.7AI score0.0014EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.19 views

Taipy 路径遍历漏洞

Taipy is an open-source application developed by Avaiga. It was designed specifically for data scientists and machine learning engineers to build data and artificial intelligence network applications. Version 4.1.1 of Taipy contains a path traversal vulnerability. This vulnerability stems from th...

8.7CVSS5.8AI score0.00409EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.30 views

PT-2026-44131

Name of the Vulnerable Software and Affected Versions crowdsec versions prior to 1.7.8 Description The AppSec component fails to read the HTTP request body when the Content-Length is not positive. This occurs specifically with HTTP/1.1 requests using Transfer-Encoding: chunked and HTTP/2 requests...

7.2CVSS5.9AI score0.00217EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/05/27 12:00 a.m.24 views

CVE-2026-46081

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - fix wrong pointer stored by acompsavereq acompsavereq stores &req-chain in req-base.data. When acompreqchaindone is invoked on asynchronous completion, it receives &req-chain as the data argument but casts it...

7.8CVSS6.6AI score0.00166EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:00 a.m.23 views

Linux Distros Unpatched Vulnerability : CVE-2026-46028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - snapshot IV for async AEAD requests AFALG AEAD AIO requests currently us...

5.5CVSS5.5AI score0.00123EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:00 a.m.21 views

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2026-1758)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1758 advisory. OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via processframe leads to Undefined Behavior CVE-2026-0716 A flaw was found in libsoup, an HTTP...

8.6CVSS7.3AI score0.00947EPSS
SaveExploits2References14
BDU FSTEC
BDU FSTEC
added 2026/05/27 12:00 a.m.7 views

The vulnerability of the check_password script of the DCE/RPC SAMR server in the Samba networking interaction software package allows a hacker to execute arbitrary code.

The vulnerability of the checkpassword script in the DCE/RPC SAMR server of the Samba networking software package is related to the failure to eliminate special elements during the processing of the parameter %u. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

10CVSS6.2AI score0.02501EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.24 views

PT-2026-43505

The Genzel breadcrumbs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the options page function. This makes it possible for unauthenticated attackers to update the plugin's...

4.3CVSS5.7AI score0.00128EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.23 views

PT-2026-43769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq256xx power supply driver. The problem occurs because the devm variant for requesting an IRQ is used before the devm variant for allocating or...

7.8CVSS5.4AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.19 views

PT-2026-43752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the cpcap-battery component. The problem occurs because the devm variant for requesting an IRQ is used before the devm variant for allocating or...

7.8CVSS5.4AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.28 views

PT-2026-43853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1 Description A memory leak exists in the cc mac digest function within the ccree crypto component. This occurs when cc map hash request...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/27 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-45916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: sbs-battery: Fix use-after-free in powersupplychanged Using the devm variant for requesting IRQ before the devm variant for allocating/registerin...

7.8CVSS7AI score0.0016EPSS
SaveExploits0References2
Exploit DB
Exploit DB
added 2026/05/27 12:00 a.m.108 views

EspoCRM 9.3.3 - SSRF

Exploit Title: EspoCRM 9.3.3 - Authenticated SSRF via Alternative IPv4 Notation Google Dork: N/A Date: 2026-05-08 Exploit Author: Max Gabriel https://github.com/EntroVyx Vendor Homepage: https://www.espocrm.com/ Software Link: https://github.com/espocrm/espocrm/releases/tag/9.3.3 Version: 9.3.3...

4.3CVSS5.2AI score0.01978EPSS
SaveExploits5
VulnCheck KEV
VulnCheck KEV
added 2026/05/27 12:00 a.m.26 views

VulnCheck KEV: CVE-2026-45321

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself...

9.6CVSS7.5AI score0.02342EPSS
SaveIn wildExploits3References5
Rows per page
Query Builder