Lucene search
+L

3540 matches found

Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-77206

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product revision operations allow a low-privileged Vendor to access revisions for products owned by another Vendor. The admin/controller/product/revisions.php...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago6 views

CVE-2026-67917

zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The azuracast:restore command executes the db.sql file extracted from a backup archive without any content validation or sanitization. This allows a remote attacker to escalate...

9.8CVSS0.00406EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 days ago9 views

CVE-2026-52886

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::startswith against the expected backup directory without path normalization, allowing parent-directory sequences during snapshot-mode...

5.1CVSS5.5AI score0.00182EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-60535

zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The azuracast:restore command executes the db.sql file extracted from a backup archive without any content validation or sanitization. This allows a remote attacker to escalate...

5.9AI score0.00406EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago28 views

CVE-2026-67917

zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The azuracast:restore command executes the db.sql file extracted from a backup archive without any content validation or sanitization. This allows a remote attacker to escalate...

0.00406EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 4 days ago4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis (UTSA-2026-100781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100781 advisory. Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK...

8.8CVSS8.1AI score0.03301EPSS
SaveExploits2References4
CVE
CVE
added 4 days ago8 views

CVE-2026-67917

zuraCast versions ≤0.23.7 execute the db.sql file from a backup archive during restore without validation or sanitization, allowing SQL injection and privilege escalation. CVSS 9.8 (network, no auth). A PoC is referenced at https://github.com/luoxuanxi/SQL-Injection-PoC/tree/main/SQL-Injection-Po...

9.8CVSS6AI score0.00406EPSS
SaveExploits0References2
Cvelist
Cvelist
added 5 days ago37 views

CVE-2026-10035 Turnkey bbPress by WeaverTheme <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection

The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.1 via deserialization of untrusted input in the wvrbbpsettoserializedvalues function reached through the wvrbbpsaverestore settings-restore handler. The function...

6.6CVSS0.004EPSS
SaveExploits0References5
NVD
NVD
added 6 days ago5 views

CVE-2026-74311

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

7.8CVSS0.00127EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago5 views

UBUNTU-CVE-2026-74311

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

7.8CVSS5.4AI score0.00127EPSS
SaveExploits0References6
CVE
CVE
added 6 days ago19 views

CVE-2026-74311

CVE-2026-74311 affects the Linux kernel virtio rtc path. The bug occurs when viortc_restore() calls viortc_init_vqs() without removing old virtqueues, enabling vp_del_vqs() to reference a NULL info pointer in vp_del_vq() and crash the guest kernel during restore. The fix deletes stale virtqueues ...

7.8CVSS5.4AI score0.00127EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago30 views

CVE-2026-74311 virtio: rtc: tear down old virtqueues before restore

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

7.8CVSS0.00127EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago6 views

CVE-2026-74311 virtio: rtc: tear down old virtqueues before restore

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtiodevicerestore resets the device and restores the negotiated features before calling -restore. viortcfreeze intentionally leaves the existing virtqueues in place so the...

7.8CVSS5.6AI score
SaveExploits0References6
EUVD
EUVD
added 6 days ago5 views

EUVD-2026-59087

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

5.4AI score0.00166EPSS
SaveExploits0References3
Cvelist
Cvelist
added 6 days ago23 views

CVE-2026-68465 mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhcchangepinstate to allow default state restore esdhcchangepinstate checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the...

0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-59077

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

5.4AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago6 views

PT-2026-72747

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio device restore resets the device and restores the negotiated features before calling -restore. viortc freeze intentionally leaves the existing virtqueues in place so the...

5.4AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 6 days ago5 views

PT-2026-72177

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhc change pinstate to allow default state restore esdhc change pinstate checks for pins 100mhz and pins 200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents th...

5.4AI score0.00166EPSS
SaveExploits0References4
Chainguard
Chainguard
added last week6 views

GO-2026-4591 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

5.3AI score
SaveExploits0
Chainguard
Chainguard
added last week11 views

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, terraform, rke2-runtime-fips, k3s, consul-k8s, etcd-fips, etcd, cert-manager-fips, backup-restore-operator, falco-no-driver, vault...

5.3AI score
SaveExploits0
Rows per page
Query Builder