Lucene search
+L

8570 matches found

Circl
Circl
•added 2026/07/29 12:01 p.m.•22 views

CVE-2015-2453

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:14+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:49+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:14+00:00| seen|...

4.7CVSS5.8AI score0.02436EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/07/29 11:22 a.m.•25 views

CVE-2026-64478

A flaw was found in the Linux kernel's ALSA USB audio driver, specifically affecting DualSense controllers. A local attacker with physical access to a DualSense controller could exploit this by rapidly disconnecting and reconnecting the device due to a weak physical connection. This action can...

6.6CVSS5.7AI score0.00184EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/07/29 6:27 a.m.•21 views

CVE-2026-63238

An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint...

6.5CVSS5.9AI score0.00341EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
•added 2026/07/29 1:09 a.m.•22 views

[SECURITY] Fedora 43 Update: gpsd-3.26.1-7.fc43

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

9.6CVSS5.8AI score0.02862EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•42 views

PT-2026-65940

Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description Incorrect default permissions on a directory used for the USB filesystem mount point allow a physically present attacker to escalate privileges. An attacker who can already execute...

6.6CVSS7.2AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•33 views

PT-2026-65947

Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description An authorization bypass exists in the udev rules of the system. A physically present attacker can connect a crafted USB device to trigger the instantiation of restricted USB device...

2.4CVSS5.5AI score0.0027EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/28 1:19 p.m.•28 views

CVE-2026-7187

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

8.8CVSS0.00366EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/07/28 12:51 p.m.•15 views

CVE-2026-13880

An use after free flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499025880...

9.6CVSS6AI score0.00306EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/28 12:50 p.m.•19 views

CVE-2026-13882

An inappropriate implementation flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499162550...

9.6CVSS8.2AI score0.00244EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/28 12:27 p.m.•27 views

EUVD-2026-49769

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

8.8CVSS5.8AI score0.00366EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/28 12:27 p.m.•21 views

CVE-2026-7187

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

8.8CVSS5.8AI score0.00366EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/28 12:27 p.m.•51 views

CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

8.8CVSS0.00366EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/28 12:27 p.m.•22 views

CVE-2026-7187 Improper Authentication in Universal Sotware's UKBS

Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects UKBS: through 28072026. NOTE: The vendor was contacted and it was learned that the product is not supported...

8.8CVSS5.9AI score0.00366EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/07/28 12:05 p.m.•16 views

CVE-2026-64242

A flaw was found in the Linux kernel's USB gadget net2280 driver. This vulnerability occurs due to a double free error in the probe error path. When a gadget device is being initialized, an error can cause the device to be freed twice, leading to memory corruption. This can result in a denial of...

7.8CVSS6AI score0.00121EPSS
SaveExploits0References4
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•3 views

Universal Media Server v13.2.1 - Cross Site Scripting Detection

Universal Media Server v13.2.1 CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Universal Media Server v13.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

5.6AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•37 views

PT-2026-65487

Name of the Vulnerable Software and Affected Versions UKBS versions prior to 28072026 Description Missing authentication for a critical function allows access to functionality that is not properly constrained by Access Control Lists ACLs, which are sets of rules that define which users or system...

8.8CVSS5.7AI score0.00366EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/07/27 9:17 p.m.•21 views

UBUNTU-CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

8.1CVSS7.2AI score0.00274EPSS
SaveExploits0References18
RedHat Linux
RedHat Linux
•added 2026/07/27 6:56 a.m.•25 views

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

7.8CVSS5.8AI score0.00123EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/07/27 12:00 a.m.•40 views

CVE-2026-64233

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four times...

5.5CVSS5.5AI score0.00114EPSS
SaveExploits0References19
UbuntuCve
UbuntuCve
•added 2026/07/27 12:00 a.m.•41 views

CVE-2026-64240

In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f "media: rc: igorplugusb: heed coherency rules" changed the control request storage from an embedded struct to an allocated pointer so it can obey DMA...

5.5CVSS5.7AI score0.00115EPSS
SaveExploits0References22
Rows per page
Query Builder