Lucene search
+L

2306 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•4 views

CVE-2026-21378: Buffer Over-read

Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...

7.8CVSS6AI score0.00075EPSS
SaveExploits0References1
Fedora
Fedora
•added 2026/04/04 12:49 a.m.•20 views

[SECURITY] Fedora 43 Update: domoticz-2026.1-1.fc43

Domoticz is a Home Automation System that lets you monitor and configure vari ous devices like: Lights, Switches, various sensors/meters like Temperature, Rain, Wind, UV, Electra, Gas, Water and much more. Notifications/Alerts can be sent to any mobile device...

4.8CVSS5.8AI score0.00194EPSS
SaveExploits0
Veracode
Veracode
•added 2026/03/28 5:23 a.m.•16 views

Cross-Site Scripting

Home Assistant is vulnerable to Cross Site Scripting. The vulnerability is due to the lack of output escaping or sanitization in the History-graph card, where an attacker can inject arbitrary tags that execute JavaScript by changing the name of a sensor to a malicious value...

8.8CVSS6.3AI score0.00248EPSS
SaveExploits1References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/03/28 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-23323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added...

7.8CVSS6.8AI score0.00134EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/27 8:35 p.m.•30 views

EUVD-2026-16775

Home Assistant has stored XSS in history-graphs...

8.8CVSS5.9AI score0.00248EPSS
SaveExploits1References2
NVD
NVD
•added 2026/03/27 8:16 p.m.•20 views

CVE-2026-33045

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable cross-site scripting, simila...

8.8CVSS0.00248EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/27 7:39 p.m.•6 views

CVE-2026-33045 Home Assistant has stored XSS in history-graphs

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable cross-site scripting, simila...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits1References2
CVE
CVE
•added 2026/03/27 7:39 p.m.•34 views

CVE-2026-33045

Home Assistant CVE-2026-33045 is a stored XSS vulnerability in the Energy dashboard triggered by an energy entity name. Affected versions are 2025.02 through 2026.00.x (prior to 2026.01); it is fixed in 2026.01. The issue arises when entity names containing HTML are rendered in graph tooltips, en...

8.8CVSS5.8AI score0.00248EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/03/27 7:39 p.m.•37 views

CVE-2026-33045 Home Assistant has stored XSS in history-graphs

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable cross-site scripting, simila...

8.8CVSS0.00248EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/27 7:39 p.m.•15 views

CVE-2026-33045 Home Assistant has stored XSS in history-graphs

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable cross-site scripting, simila...

8.8CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•1 views

CVE-2026-33045: Improper Neutralization of Input During Web Page Generation

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones imported/included from Android Auto it appears is vulnerable cross-site scripting, simila...

8.8CVSS5.7AI score0.00248EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/27 12:00 a.m.•23 views

Home Assistant 跨站脚本漏洞

Home Assistant is an open-source family automation management system developed by Home Assistant. This system is primarily used to control household automation devices. In versions of Home Assistant from 2025.02 to 2026.01, there was a cross-site scripting vulnerability. This vulnerability...

8.8CVSS5.7AI score0.00248EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/26 3:10 p.m.•11 views

CVE-2026-32843

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS6AI score0.00562EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/03/26 12:00 a.m.•16 views

The vulnerability of the iio_sysfs_triggerremove() function in the drivers/iio/trigger/iio-trig-sysfs.c file of the driver module affects various types of built-in kernel sensors in the Linux operating system. This vulnerability allows a malicious actor to cause a service failure.

The vulnerability of the iiosysfstriggerremove function in the drivers/iio/trigger/iio-trig-sysfs.c file of various types of embedded sensors in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00229EPSS
SaveExploits0References18Affected Software2
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•17 views

SUSE CVE-2026-23323

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage sens...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/03/25 12:30 p.m.•24 views

EUVD-2026-15276

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage sens...

5.7AI score0.00134EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/25 11:16 a.m.•21 views

CVE-2026-23323

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage sens...

7.8CVSS0.00134EPSS
SaveExploits0References2
OSV
OSV
•added 2026/03/25 11:16 a.m.•16 views

UBUNTU-CVE-2026-23323

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage sens...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/03/25 11:16 a.m.•21 views

CVE-2026-23323

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage sens...

7.8CVSS5.8AI score0.00134EPSS
SaveExploits0References4
OSV
OSV
•added 2026/03/25 10:27 a.m.•15 views

CVE-2026-23323 hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver

In the Linux kernel, the following vulnerability has been resolved: hwmon: macsmc Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. Specifically: - The voltage sens...

5.8AI score
SaveExploits0References5
Rows per page
Query Builder