|
3351
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix dir separator in SMB1 UNIX mounts
When calling cifs_mount_get_tcon() with SMB1 UNIX mounts,
@cifs_sb->mnt_cifs_f…
|
NVD-CWE-noinfo
|
CVE-2026-31710
|
2026-05-7 05:21 |
2026-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3352
|
7.5 |
HIGH
Network
|
lobster-world
|
lobster_pro
|
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server a…
|
CWE-611
XXE
|
CVE-2024-13971
|
2026-05-7 05:19 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3353
|
7.5 |
HIGH
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
smb: server: fix active_num_conn leak on transport allocation failure
Commit 77ffbcac4e56 ("smb: server: fix leak of active_num_c…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2026-31711
|
2026-05-7 05:18 |
2026-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3354
|
8.8 |
HIGH
Network
|
-
|
-
|
Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows authenticated users with media-upload permissions to bypass extension restricti…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2026-41938
|
2026-05-7 05:16 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3355
|
8.1 |
HIGH
Network
|
-
|
-
|
Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import feature that allows authenticated site_admin users to read arbitrary files and mod…
|
CWE-611
XXE
|
CVE-2026-41936
|
2026-05-7 05:16 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3356
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain sensitive server information by triggering unhandled exceptions in the pa…
|
CWE-209
CWE-1188
Information Exposure Through an Error Message
Insecure Default Initialization of Resource
|
CVE-2026-41931
|
2026-05-7 05:16 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3357
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to access the bundled phpMyAdmin con…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-41930
|
2026-05-7 05:16 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3358
|
- |
|
-
|
-
|
Rejected reason: This CVE is a duplicate of another CVE: CVE-2026-33079.
|
-
|
CVE-2026-33441
|
2026-05-7 05:16 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3359
|
8.3 |
HIGH
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: require minimum ACE size in smb_check_perm_dacl()
Both ACE-walk loops in smb_check_perm_dacl() only guard against an
under…
|
CWE-787
Out-of-bounds Write
|
CVE-2026-31712
|
2026-05-7 05:16 |
2026-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3360
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: add missing netlink_ns_capable() check for peer netns
rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the pee…
|
NVD-CWE-noinfo
|
CVE-2026-31692
|
2026-05-7 05:05 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
