|
3861
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:
can: usb: f81604: anclar correctamente el urb en la devolución de llamada de lectura masiva
Al enviar un urb, que está usando el…
|
NVD-CWE-noinfo
|
CVE-2026-23347
|
2026-04-25 03:10 |
2026-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3862
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
cxl: Fix race of nvdimm_bus object when creating nvdimm objects
Found issue during running of cxl-translate.sh unit test. Adding …
|
CWE-362
Race Condition
|
CVE-2026-23348
|
2026-04-25 03:08 |
2026-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3863
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:
cxl: Corrige la condición de carrera del objeto nvdimm_bus al crear objetos nvdimm
Se encontró el problema durante la ejecución …
|
CWE-362
Race Condition
|
CVE-2026-23348
|
2026-04-25 03:08 |
2026-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3864
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue affects Kubio AI Page Builder: f…
|
CWE-79
Cross-site Scripting
|
CVE-2026-34887
|
2026-04-25 03:08 |
2026-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3865
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en Extend Themes Kubio AI Page Builder permite XSS Almacenado. Este problema afect…
|
CWE-79
Cross-site Scripting
|
CVE-2026-34887
|
2026-04-25 03:08 |
2026-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3866
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows DOM-Based XSS.This issue affect…
|
CWE-79
Cross-site Scripting
|
CVE-2026-34889
|
2026-04-25 03:08 |
2026-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3867
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MSTW League Manager allows DOM-Based XSS.This issue affects MSTW League Manager: f…
|
CWE-79
Cross-site Scripting
|
CVE-2026-34890
|
2026-04-25 03:08 |
2026-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3868
|
8.5 |
HIGH
Network
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assis…
|
CWE-89
SQL Injection
|
CVE-2026-34885
|
2026-04-25 03:08 |
2026-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3869
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Media LIbrary Assistan…
|
CWE-79
Cross-site Scripting
|
CVE-2026-34897
|
2026-04-25 03:08 |
2026-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3870
|
7.5 |
HIGH
Network
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & …
|
CWE-352
Origin Validation Error
|
CVE-2026-34896
|
2026-04-25 03:08 |
2026-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|