Lucene search
+L

1008 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/21 12:00 a.m.12 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006913 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/x86: mxm-wmi: fix memleak in mxmwmicallmxds|mx The ACPI buffer memory out.pointer return...

5.5CVSS6.1AI score0.00157EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:00 a.m.12 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013149)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013149 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: avoid referencing uninit memory in ath9kwmictrlrx For the reasons also described in...

5.9AI score0.00229EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:00 a.m.12 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007251 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay all of ath9kwmieventtasklet until init is complete The ath9kwmieventtasklet us...

4.7CVSS6.2AI score0.00188EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/09 12:00 a.m.17 views

PT-2026-51916

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the populate enum data function within the dell-wmi-sysman module. The function aggregates firmware-provided value-modifier and possible-value strings into fixed...

6CVSS6.2AI score0.00123EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/03/26 8:01 a.m.12 views

platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

...

5.5CVSS5.8AI score0.00125EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/03/26 12:00 a.m.10 views

The vulnerability of the `init_bios_attributes()` function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c driver for X86 kernel-based Linux devices allows a hacker to cause a service failure.

The vulnerability of the initbiosattributes function in the drivers/platform/x86/dell/dell-wmi-sysman/sysman.c file of the Linux kernel device driver for X86 processors is related to errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6AI score0.00203EPSS
SaveExploits0References14Affected Software3
SUSE CVE
SUSE CVE
added 2026/03/25 4:55 p.m.14 views

SUSE CVE-2026-23370

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References16
RedhatCVE
RedhatCVE
added 2026/03/25 3:00 p.m.13 views

CVE-2026-23370

A flaw was found in the dell-wmi-sysman component of the Linux kernel. This vulnerability occurs because the setnewpassword function incorrectly hex dumps the entire buffer, which includes sensitive plaintext password data. A local attacker could exploit this to disclose user credentials, leading...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/25 12:30 p.m.11 views

EUVD-2026-15355

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.6AI score0.00125EPSS
SaveExploits0References7
NVD
NVD
added 2026/03/25 11:16 a.m.10 views

CVE-2026-23370

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.5CVSS0.00125EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/03/25 11:16 a.m.17 views

CVE-2026-23370

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.5CVSS5.4AI score0.00125EPSS
SaveExploits0References34
OSV
OSV
added 2026/03/25 11:16 a.m.17 views

UBUNTU-CVE-2026-23370

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References35
CVE
CVE
added 2026/03/25 10:27 a.m.40 views

CVE-2026-23370

CVE-2026-23370 concerns a Linux kernel vulnerability in platform/x86: dell-wmi-sysman where set_new_password() hex dumps the buffer containing plaintext passwords (including current/new passwords). The issue could leak credentials locally and is mitigated by removing the hex dump; upstream kernel...

5.5CVSS5.6AI score0.00125EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/03/25 10:27 a.m.10 views

CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.7AI score
SaveExploits0References12
Debian CVE
Debian CVE
added 2026/03/25 10:27 a.m.26 views

CVE-2026-23370

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.5CVSS5.2AI score0.00125EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/25 10:27 a.m.4 views

CVE-2026-23370

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

5.6AI score0.00125EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/03/25 10:27 a.m.42 views

CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data, including current and new passwords. Remove the hex dump to avoid leaking...

0.00125EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/03/25 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-23370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data setnewpassword hex dumps the entire buffer, which contains plaintext password data,...

5.5CVSS4.4AI score0.00125EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/03/25 12:00 a.m.12 views

The vulnerability of the ath9k_wmi_cmd() function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath9kwmicmd function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter in the Linux operating system is related to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7CVSS6.1AI score0.00195EPSS
SaveExploits0References22Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/03/16 12:00 a.m.10 views

The vulnerability of the function alienware_wmax_wmi_init() in the Linux kernel’s module drivers/platform/x86/dell/alienware-wmi-wmax.c allows a hacker to trigger a service failure.

The vulnerability of the function alienwarewmaxwmiinit in the module drivers/platform/x86/dell/alienware-wmi-wmax.c of the Linux kernel is related to an infinite loop. Exploiting this vulnerability can allow a attacker to cause a service failure...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder