Lucene search
+L

8047 matches found

osv_cve
osv_cve
•added 2025/02/27 8:01 p.m.•18 views

CVE-2025-21810 driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()

In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API classdeviternext There are a potential wild pointer dereferences issue regarding APIs classdeviterinit|next|exit, as explained by below typical usage: // All members of @it...

7.8CVSS6.1AI score
SaveExploits0References7
CVE
CVE
•added 2025/02/27 8:01 p.m.•151 views

CVE-2025-21810

Technical details for CVE-2025-21810 are not publicly available in the provided connected documents. Monitor kernel advisories and vendor advisories for affected versions, impact, and fixes.

7.8CVSS6.4AI score0.00202EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/02/27 8:01 p.m.•39 views

CVE-2025-21810 driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()

In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API classdeviternext There are a potential wild pointer dereferences issue regarding APIs classdeviterinit|next|exit, as explained by below typical usage: // All members of @it...

7.8CVSS0.00202EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/02/27 8:01 p.m.•22 views

CVE-2025-21810

In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API classdeviternext There are a potential wild pointer dereferences issue regarding APIs classdeviterinit|next|exit, as explained by below typical usage: // All members of @it...

7.8CVSS5.7AI score0.00202EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/27 12:00 a.m.•5 views

CVE-2025-21810: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API classdeviternext There are a potential wild pointer dereferences issue regarding APIs classdeviterinit|next|exit, as explained by below typical usage: // All members of @it...

7.8CVSS5.9AI score0.00202EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/02/27 12:00 a.m.•19 views

SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for Maven (SUSE-SU-2025:0719-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0719-1 advisory. maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: - Key changes across versions: Bug...

9CVSS6.8AI score0.22709EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/02/26 12:00 a.m.•28 views

Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2025-846)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-846 advisory. A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to...

5.5CVSS6.7AI score0.00271EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2025/02/25 1:12 p.m.•10 views

SUSE-SU-2025:20128-1 Security update for vim

This update for vim fixes the following issues: vim was updated to 9.1.1101: - CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 - CVE-2024-43790: Fixed Out of bounds read when performing a search command bsc1229685 - CVE-2024-43802: Fixed heap-buffer-overflow in instypebuf bsc1229822 -...

7.8CVSS6.1AI score0.00541EPSS
SaveExploits1References18
SUSE Linux
SUSE Linux
•added 2025/02/25 1:11 p.m.•12 views

Security update for vim

This update for vim fixes the following issues: vim was updated to 9.1.1101: CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 CVE-2024-43790: Fixed Out of bounds read when performing a search command bsc1229685 CVE-2024-43802: Fixed heap-buffer-overflow in instypebuf bsc1229822...

4.6CVSS7.6AI score0.00541EPSS
SaveExploits1References34
Tenable Nessus
Tenable Nessus
•added 2025/02/25 12:00 a.m.•19 views

SUSE SLES15 / openSUSE 15 : Feature update for slurm and pdsh (SUSE-SU-SUSE-FU-2025:0660-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-FU-2025:0660-1 advisory. slurm was updated to version 24.11.1 using package slurm2411: - Security issues fixed: CVE-2024-48936: Fixed authenticati...

5CVSS5.8AI score0.0035EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2025/02/25 12:00 a.m.•26 views

SUSE SLES12 : Feature update for slurm and pdsh (SUSE-SU-SUSE-FU-2025:0661-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-FU-2025:0661-1 advisory. slurm was updated to version 24.11.1 using package slurm2411: - Security issues fixed: CVE-2024-48936: Fixed authentication...

5CVSS5.8AI score0.0035EPSS
SaveExploits0References10
osv_suse
osv_suse
•added 2025/02/24 2:11 a.m.•72 views

SUSE-FU-2025:0661-1 Feature update for slurm and pdsh

This update for slurm and pdsh fixes the following issues: slurm was updated to version 24.11.1 using package slurm2411: - Security issues fixed: CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes under other users' jobs bsc1236722...

5CVSS5.5AI score0.0035EPSS
SaveExploits0References8
osv_suse
osv_suse
•added 2025/02/24 2:10 a.m.•91 views

SUSE-FU-2025:0660-1 Feature update for slurm and pdsh

This update for slurm and pdsh fixes the following issues: slurm was updated to version 24.11.1 using package slurm2411: - Security issues fixed: CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes under other users' jobs bsc1236722...

5CVSS5.5AI score0.0035EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/02/24 12:00 a.m.•5 views

PT-2025-8697

Name of the Vulnerable Software and Affected Versions better-auth affected versions not specified Description A security bypass was found in the better-auth library, allowing for an open redirect vulnerability. This vulnerability can be exploited by manipulating the callbackURL parameter to...

7.1CVSS5.6AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/02/14 5:57 p.m.•31 views

@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Summary For the npm package @octokit/plugin-paginate-rest, when calling octokit.paginate.iterator, a specially crafted octokit instance—particularly with a malicious link parameter in the headers section of the request—can trigger a ReDoS attack. Details The issue occurs at line 39 of iterator.ts...

5.3CVSS6.8AI score0.00628EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2025/02/14 5:57 p.m.•24 views

GHSA-H5C3-5R3R-RR8Q @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Summary For the npm package @octokit/plugin-paginate-rest, when calling octokit.paginate.iterator, a specially crafted octokit instance—particularly with a malicious link parameter in the headers section of the request—can trigger a ReDoS attack. Details The issue occurs at line 39 of iterator.ts...

5.3CVSS5.2AI score0.00628EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/02/14 12:00 a.m.•20 views

PT-2025-7071

Name of the Vulnerable Software and Affected Versions: @octokit/plugin-paginate-rest versions 1.0.0 through 11.4.1 Description: The issue is a Regular Expression Denial of Service ReDoS vulnerability that can be triggered when calling octokit.paginate.iterator with a specially crafted octokit...

5.3CVSS6.4AI score0.00628EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
•added 2025/02/13 12:00 a.m.•7 views

Debian dla-4052 : libecpg-compat3 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4052 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4052-2 [email protected] https://www.debian.org/lts/security/...

8.1CVSS7.7AI score0.9003EPSS
SaveExploits10References4
osv_cve
osv_cve
•added 2025/02/12 6:16 p.m.•29 views

CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...

8.2CVSS6.7AI score0.01927EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/02/12 6:16 p.m.•29 views

CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...

8.2CVSS8.3AI score0.04753EPSS
SaveExploits2References5
Rows per page
Query Builder