Lucene search
+L

29 matches found

NVD
NVD
•added 2026/10/07 8:17 p.m.•13 views

CVE-2026-97716

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

8.7CVSS0.00344EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 7:41 p.m.•20 views

CVE-2026-97716

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Absolute Secure Access servers prior to version 14.60 . An unauthenticated attacker can trigger a persistent denial of service by sending specially crafted traffic to the server. No exploit information or specific remediatio...

8.7CVSS5.8AI score0.00344EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 7:41 p.m.•47 views

CVE-2026-97716 Denial of Service in Absolute Secure Access

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

8.7CVSS0.00344EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 7:41 p.m.•14 views

EUVD-2026-94577

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

8.7CVSS5.8AI score0.00344EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/07 7:41 p.m.•15 views

CVE-2026-97716 Denial of Service in Absolute Secure Access

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

8.7CVSS5.8AI score0.00344EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•11 views

PT-2026-107671

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

8.7CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•9 views

CVE-2026-97716: Uncontrolled Resource Consumption

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

8.7CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
•added 2025/09/16 3:44 p.m.•24 views

How to Set Up and Use a Burner Phone

Obtaining and using a true burner phone is hard—but not impossible. Here are the steps you need to take to protect your mobile communications based on the risks you face...

7AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/04/18 11:20 p.m.•11 views

SUSE CVE-2025-22046

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Harden uretprobe syscall trampoline check Jann reported a possible issue when trampolinecheckip returns address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set...

5.5CVSS7.8AI score0.00202EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2024/05/24 12:00 a.m.•24 views

Social Pixel <= 2.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to:...

5.3AI score0.00419EPSS
SaveExploits2
CVE
CVE
•added 2024/05/21 3:04 p.m.•126 views

CVE-2021-47424

The CVE-2021-47424 issue affects the Linux kernel i40e driver. When VSI setup fails during PF switch in i40e_probe(), the code attempted to free misc IRQ vectors in i40e_clear_interrupt_scheme, potentially freeing an IRQ that had not been allocated yet, leading to a kernel Oops (example trace sho...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/06 12:00 a.m.•7 views

CVE-2022-39095: Missing Authorization

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...

7.8CVSS5.8AI score0.00154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/06 12:00 a.m.•6 views

CVE-2022-42777: Missing Authorization

In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed...

7.8CVSS5.8AI score0.00131EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/25 12:00 a.m.•29 views

PT-2022-20165 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: A command injection issue exists in the XCMD setUPnP functionality, allowing arbitrary command execution through a specially-crafted XCMD. An attacker can...

10CVSS9.7AI score0.03322EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/10/20 12:00 a.m.•17 views

Abode Iota operating system command injection vulnerability

Abode Iota is a reliable Diy home security system from Abode. An operating system command injection vulnerability exists in Abode Iota versions 6.9X and 6.9Z, which stems from an operating system command injection in the XCMD setUPnP function and can be exploited by an attacker to send a maliciou...

10CVSS8.7AI score0.03322EPSS
SaveExploits1References4
Prion
Prion
•added 2022/06/13 1:15 p.m.•32 views

Cross site request forgery (csrf)

The New User Email Set Up WordPress plugin through 0.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

4.3CVSS6.3AI score0.00534EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2022/06/13 12:42 p.m.•88 views

CVE-2022-1790

The CVE-2022-1790 entry concerns the WordPress plugin “New User Email Set Up” (versions

6.5CVSS6.3AI score0.00534EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/13 12:00 a.m.•5 views

PT-2022-14114

Name of the Vulnerable Software and Affected Versions The New User Email Set Up WordPress plugin versions 0.5.2 and earlier Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Thi...

6.5CVSS0.00534EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/13 12:00 a.m.•8 views

CVE-2022-1790: Cross-Site Request Forgery (CSRF)

The New User Email Set Up WordPress plugin through 0.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

6.5CVSS6.6AI score0.00534EPSS
SaveExploits2References2
wpexploit
wpexploit
•added 2022/05/23 12:00 a.m.•184 views

New User Email Set Up <= 0.5.2 - Arbitrary Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack document.getElementById"test".submit;...

6.5CVSS0.5AI score0.00534EPSS
SaveExploits2
Rows per page
Query Builder