Lucene search
+L

263112 matches found

Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.11 views

PT-2026-65162

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A logic issue exists due to insufficient validation, which may allow an application to access user-sensitive data...

5.5CVSS5.4AI score0.00115EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.12 views

PT-2026-65107

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A deserialization weakness exists in the way JFrog Artifactory handles packages. This flaw could allow a low-privileged user to compromise confidentiality, integrity, and availabili...

8.8CVSS5.9AI score0.00312EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.9 views

PT-2026-65263

The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing...

5.8AI score0.0034EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/27 12:0 a.m.21 views

PT-2026-64999

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description A remote code execution issue exists in the configuration API. Authenticated administrators possessing CONFIGURATION EDIT and ATTACHMENT ADD privileges can write arbitrary PHP files by manipulating...

9.4CVSS6.6AI score0.00241EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-17523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code...

7.8CVSS6.2AI score0.00119EPSS
SaveExploits0References3
Apple
Apple
added 2026/07/27 12:0 a.m.265 views

About the security content of Safari 26.6

About the security content of Safari 26.6 This document describes the security content of Safari 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS5.9AI score0.0034EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/07/26 6:30 a.m.30 views

CVE-2024-14040

CVE-2024-14040 affects the Linux kernel’s nexthop handling in ECMP/CLOS networks. The patch increases the nexthop weight width from 8-bit to 16-bit to accommodate large weight ratios (e.g., 1000:999) that don’t fit in 8 bits. The UAPI changes introduce a weight_high field and split fields to pres...

7.8CVSS5.6AI score0.0011EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/26 6:30 a.m.7 views

CVE-2024-14040

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur at various points in the network, ECMP weights of the involved nodes are adjusted to compensate. With high fan-out of the involved nodes, and overall...

5.6AI score0.0011EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/07/26 2:16 a.m.14 views

CVE-2026-15962

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The...

8.8CVSS0.00382EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/26 1:28 a.m.35 views

CVE-2026-15962 Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The...

8.8CVSS0.00382EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/26 1:28 a.m.11 views

CVE-2026-15962

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The...

8.8CVSS5.8AI score0.00382EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/26 1:28 a.m.68 views

CVE-2026-15962

CVE-2026-15962 affects the Fluent Forms Pro Add On Pack for WordPress (all versions up to 6.2.6). It enables PHP Object Injection through deserialization of untrusted input. An authenticated attacker with Subscriber-level access or higher can inject a PHP Object, with a POP chain allowing passwor...

8.8CVSS5.8AI score0.00382EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/26 1:28 a.m.9 views

EUVD-2026-49047

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The...

8.8CVSS5.8AI score0.00382EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/07/26 12:0 a.m.9 views

VulnCheck KEV: CVE-2026-59821

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to creat...

8.8CVSS5.9AI score0.00355EPSS
SaveIn wildExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/25 4:46 p.m.5 views

SUSE CVE-2026-64290

In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufdfaultfopsread On a copytouser failure inside the inner listforeachentry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing...

5.8AI score0.002EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 4:0 p.m.6 views

SUSE CVE-2026-64392

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for delete-on-close Delete-on-close can be completed by deferred or durable handle teardown, where no request work is available. Both the base-file unlink and the ADS xattr removal consequently run...

9.1CVSS5.7AI score0.00469EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 3:59 p.m.8 views

SUSE CVE-2026-64411

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: terminate table name before findtablelock updatecounters and compatupdatecounters forward a user-supplied 32-byte table name to findtablelock without NUL-terminating it. On a lookup miss, findinlistlock calls...

7.1CVSS5.7AI score0.00126EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/25 3:59 p.m.7 views

SUSE CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

7.8CVSS6AI score0.00139EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/25 10:17 a.m.7 views

CVE-2026-64449

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: bound slave read/write to the kernbuf size The SLAVE-path helpers buffertouser and bufferfromuser copy 'count' bytes into/out of the fixed-size kernbuf sizebuf == PCIBUFSIZE == 0x20000, 128 KiB using ppos as the...

7.8CVSS0.00139EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/25 10:17 a.m.8 views

CVE-2026-64290

In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufdfaultfopsread On a copytouser failure inside the inner listforeachentry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing...

0.002EPSS
SaveExploits0References4
Rows per page
Query Builder