Lucene search
+L

26961 matches found

ATTACKERKB
ATTACKERKB
added 5 hours ago2 views

CVE-2026-13142

The Social Login, Passkeys, Magic Link & Email OTP WordPress plugin before 1.4.1 does not enforce rate limiting or a working attempt lockout on its passwordless email one-time-password verification, and stores the short numeric codes in plaintext, allowing an unauthenticated attacker who knows a...

5.5AI score
Exploits0References1
Cvelist
Cvelist
added yesterday12 views

CVE-2026-64072 nvme: fix bio leak on mapping failure

In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local bio is always NULL, so we'd leak the bio if the integrity mapping failed. Just get it directly from the request...

Exploits0References3
Cvelist
Cvelist
added yesterday16 views

CVE-2026-64024 tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcptwisn leak enabling ISN prediction Blamed commit moved the TIMEWAIT-derived ISN from the skb control block to a per-CPU variable, assuming the value would always be consumed by tcpconnrequest for the sam...

Exploits0References3
CVE
CVE
added yesterday12 views

CVE-2026-16218

Technical details for CVE-2026-16218 are not publicly available in the provided documents; no affected versions, root cause specifics, or remediation are disclosed here. Monitor for updates.

2.6CVSS4AI score0.002EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-16218

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

2.6CVSS4AI score0.002EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added yesterday9 views

EUVD-2026-45429

A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function resetstorage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high...

2.6CVSS4AI score0.002EPSS
Exploits0References6
NVD
NVD
added yesterday9 views

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS0.00081EPSS
Exploits0References6
CVE
CVE
added yesterday8 views

CVE-2026-16213

Summary of vulnerability (CVE-2026-16213) : In Fantomas42 django-blog-zinnia (up to 0.20), a flaw affects an unknown function in the file zinnia/views/mixins/entry_protection.py (Protected Entry Password Handler). The manipulation leads to the cleartext storage of sensitive information . Exploita...

4.8CVSS4.3AI score0.00081EPSS
Exploits0References6
EUVD
EUVD
added yesterday7 views

EUVD-2026-45424

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00081EPSS
Exploits0References6
Cvelist
Cvelist
added yesterday23 views

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS0.00081EPSS
Exploits0References6
Nuclei
Nuclei
added yesterday73 views

QSAN Storage Manager <3.3.3 - Cross-Site Scripting

QSAN Storage Manager before 3.3.3 contains a reflected cross-site scripting vulnerability. Header page parameters do not filter special characters. Remote attackers can inject JavaScript to access and modify specific data. id: CVE-2021-37216 info: name: QSAN Storage Manager 3.3.3 - Cross-Site...

6.1CVSS5.9AI score0.03186EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-61337

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma vecs leak on p2p memory We don't unmap P2P memory, so we don't need to track it. The dma vec allocation was getting leaked on the completion...

5.3AI score
Exploits0References3
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-61047

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entry protection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00081EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-61388

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme free host mem nvme free host mem frees dev-hmb sgt via dma free noncontiguous but never clears the pointer afterward. This leads to a use-after-free if nvme free host mem is called twice in th...

5.4AI score
Exploits0References4
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-45395

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...

6.8CVSS5.4AI score0.00144EPSS
Exploits0References3
Nuclei
Nuclei
added 2 days ago134 views

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

9.1CVSS8.6AI score0.59798EPSS
Exploits1References5
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-13473 IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow

IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server ...

8.1CVSS0.00456EPSS
Exploits0References1
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-45307

IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server ...

8.1CVSS6.5AI score0.00456EPSS
Exploits0References1
CVE
CVE
added 3 days ago19 views

CVE-2026-13473

IBM Storage Protect Client is affected by CVE-2026-13473: a heap-based buffer overflow caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code or crash the server. Affected versions are 8.1.0.0–8.1.27.0, 8.1.27.1, and 8.2.0.0–8.2.1.0. The public fi...

8.1CVSS6.5AI score0.00456EPSS
Exploits0References1
NVD
NVD
added 3 days ago7 views

CVE-2026-47183

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming.logexceptiondebug and the four QuietLogger exception-dedup methods stored an unbounded seenlogs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.excinfo...

6.5CVSS0.00241EPSS
Exploits0References5
Rows per page
Query Builder