Lucene search
+L

4221 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-21969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2capsendcmd After the hci sync command releases l2capconn, the hci receive data work queue references the...

8.8CVSS7AI score0.00242EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-21938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcppmnlappendnewlocaladdr If multiple connection...

7.5CVSS5.5AI score0.00353EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-37806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user...

5.5CVSS6.6AI score0.00174EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-38237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: platform: exynos4-is: Add hardware sync wait to fimcishwchangemode In fimcishwchangemode, the function changes camera modes without waiting for hardware...

5.5CVSS6.2AI score0.0014EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-47278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: pcigeneric: Fix possible use-after-free in mhipciremove This driver's remove path...

7.8CVSS5.7AI score0.00219EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/08/06 8:1 a.m.3 views

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

7.8CVSS7.1AI score0.00215EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2025/08/06 7:0 a.m.3 views

__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock

...

7.8CVSS7AI score0.0014EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/08/05 6:1 p.m.3 views

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

7.8CVSS7.1AI score0.00215EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:0 a.m.8 views

The vulnerability of the CtrlCHandler() function in the why.cpp module of the “Red Database” database management system allows a hacker to cause a service failure.

The vulnerability of the CtrlCHandler function in the why.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.6CVSS5.5AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/07/31 12:0 a.m.9 views

The vulnerability of the mhi_ep_ring_add_element() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mhiepringaddelement function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.0038EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
added 2025/07/30 4:6 p.m.15 views

CVE-2025-8353

UI synchronization issue in the Just-in-Time JIT access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing...

0.00389EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/30 4:6 p.m.8 views

CVE-2025-8353

UI synchronization issue in the Just-in-Time JIT access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing...

6.7AI score0.00389EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/30 4:6 p.m.24 views

CVE-2025-8353

The CVE-2025-8353 entry concerns a UI synchronization issue in Devolutions Server (JIT) that affects versions prior to and including 2025.2.4.0. A remote authenticated attacker could exploit stale UI state during standard checkout processing to gain unauthorized access to deleted JIT Groups. Affe...

5.9CVSS7.1AI score0.00389EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/30 12:0 a.m.9 views

PT-2025-31415 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2025.2.4.0 Description: A UI synchronization issue exists in the Just-in-Time JIT access request approval interface. This issue allows a remote authenticated attacker to gain unauthorized access to deleted...

5.9CVSS6.4AI score0.00389EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.8 views

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2025.2.4.0 and earlier, which stems from a UI synchronization issue that could lead to...

5.9CVSS6.5AI score0.00389EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/29 1:38 p.m.9 views

RLSA-2025:8395 Low: rsync security update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

8.8CVSS7AI score0.04793EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2025/07/29 1:38 p.m.5 views

rsync security update

An update is available for rsync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...

8.8CVSS7.4AI score0.04793EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/07/29 12:20 a.m.6 views

Low: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

8.8CVSS7AI score0.04793EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/07/29 12:0 a.m.5 views

RHEL 8 : rsync (RHSA-2025:12013)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12013 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

8.8CVSS7.1AI score0.04793EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/07/28 8:16 a.m.5 views

kernel: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFSLAYOUTDRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFSLAYOUTDRAIN bit in pnfsupdatelayout, however the pnfslayouthdr's...

7.5CVSS6.2AI score0.00329EPSS
SaveExploits0References5
Rows per page
Query Builder