Lucene search
+L

770 matches found

Cvelist
Cvelist
•added 2026/05/13 3:08 p.m.•92 views

CVE-2026-43489 liveupdate: luo_file: remember retrieve() status

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luofile: remember retrieve status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals cause problems because once the file is...

0.00143EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/13 3:08 p.m.•11 views

CVE-2026-43489

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luofile: remember retrieve status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals cause problems because once the file is...

5.6AI score0.00143EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/05/13 3:08 p.m.•15 views

CVE-2026-43489 liveupdate: luo_file: remember retrieve() status

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luofile: remember retrieve status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals cause problems because once the file is...

5.6AI score
SaveExploits0References5
CVE
CVE
•added 2026/05/13 3:08 p.m.•52 views

CVE-2026-43489

The CVE-2026-43489 issue concerns the Linux kernel liveupdate code path for LUO files, specifically luo_file.retrieve_status. The bug arises because on a failed retrieve, luo_retrieve_file() returns an error without recording that a retrieve was attempted or its error code. This can cause an erro...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/05/13 3:08 p.m.•26 views

CVE-2026-43489

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luofile: remember retrieve status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals cause problems because once the file is...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•30 views

PT-2026-40696

In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo file: remember retrieve status LUO keeps track of successful retrieve attempts on a LUO file. It does so to avoid multiple retrievals of the same file. Multiple retrievals cause problems because once the file is...

5.6AI score0.00143EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•20 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the luoretrievefile function. When retrieval fails, this function does not record the attempt...

5.8AI score0.00143EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•2 views

CVE-2026-45215: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•2 views

CVE-2026-25468: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/06 12:00 a.m.•12 views

Directory Traversal

Overview org.springframework.cloud:spring-cloud-config-server is a library that provides an HTTP resource-based API for external configuration. Affected versions of this package are vulnerable to Directory Traversal via the retrieve and binary methods in ResourceController. An attacker can read...

9.1CVSS6.3AI score0.00819EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/05 3:00 p.m.•8 views

CVE-2026-7844

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/listfiles/retrievefile/retrievefilecontent/deletefile of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Compatible File Service...

6.3CVSS6.4AI score0.00486EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•29 views

LangChain-Chatchat 授权问题漏洞

LangChain-Chatchat is a chatbot software developed based on the LangChain framework, open-sourced by Chatchat-Space. Versions of Langchain-Chatchat 0.3.1.3 and earlier had an authorization vulnerability. This vulnerability stems from a lack of authentication in the functions...

6.3CVSS6.6AI score0.00486EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•2 views

CVE-2026-6500: Plaintext Storage of a Password

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5...

4.8CVSS5.8AI score0.00137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•1 views

CVE-2026-42644: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through = 4.3.10...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•25 views

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to retrieve threaded messages that should be filtered by the sender's permission list...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•2 views

CVE-2026-42379: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.8AI score0.00371EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/22 8:09 p.m.•13 views

CVE-2017-20230

A flaw was found in Storable for Perl. A remote attacker can exploit a vulnerability in the retrievehook function by crafting malicious data. This flaw occurs because the function incorrectly handles the length of class names, storing it as a signed integer but processing it as unsigned during re...

10CVSS5.7AI score0.00641EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2017-20230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read...

10CVSS6AI score0.00641EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/21 6:31 p.m.•15 views

EUVD-2017-18967

Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow...

10CVSS5.8AI score0.00641EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/21 4:16 p.m.•21 views

CVE-2017-20230

Storable versions before 3.05 for Perl has a stack overflow. The retrievehook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow...

10CVSS0.00641EPSS
SaveExploits0References6
Rows per page
Query Builder