Search vulnerabilities

Results 9

Export CSV
CVE-2026-93062

wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments Make sure we don't end-up with a num_frags = 0 situation. For that, check that the required size is not 0 and put a checker on num_frags as well.

CVSS n/a EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2025-58304

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2016-5405

389-ds-base: Password verification vulnerable to timing attack

389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.

CVSS 3.0 · 9.8 Critical EPSS 3.1% KEV · Not listed
Vendors
CVE-2016-5486

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2015-8346

app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form.

CVSS 3.0 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
CVE-2014-1591

Mozilla: CSP leaks redirect data via violation reports (MFSA 2014-86)

Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web site that receives a report after a redirect.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2014-1595

Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is needed by jemalloc-based applications, which allows local users to obtain sensitive information by reading /tmp files, as demonstrated by credential information.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2016-10841

The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2024-51522

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Products