Lucene search
+L

25605 matches found

RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.9 views

CVE-2025-52716

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Acato WP REST Cache wp-rest-cache allows PHP Local File Inclusion.This issue affects WP REST Cache: from n/a through = 2025.1.0...

7.5CVSS5.9AI score0.00447EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/08/16 11:12 a.m.20 views

CVE-2025-38534

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is used by Ceph with local caching sets up a new request to write data just read to the cache. The request is started and then...

5.5CVSS5.3AI score0.00127EPSS
SaveExploits0
OSV
OSV
added 2025/08/16 11:12 a.m.11 views

CVE-2025-38534 netfs: Fix copy-to-cache so that it performs collection with ceph+fscache

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is used by Ceph with local caching sets up a new request to write data just read to the cache. The request is started and then...

6.2AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/08/16 11:12 a.m.7 views

CVE-2025-38534

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is used by Ceph with local caching sets up a new request to write data just read to the cache. The request is started and then...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/08/16 11:12 a.m.22 views

CVE-2025-38534 netfs: Fix copy-to-cache so that it performs collection with ceph+fscache

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix copy-to-cache so that it performs collection with ceph+fscache The netfs copy-to-cache that is used by Ceph with local caching sets up a new request to write data just read to the cache. The request is started and then...

0.00127EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/16 12:00 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from netfs copy-to-cache not handling collections correctly, which could cause requests to hang...

5.5CVSS6.5AI score0.00127EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/16 12:00 a.m.15 views

PT-2025-33577

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The netfs copy-to-cache mechanism, used by Ceph with local caching, incorrectly handles asynchronous Direct I/O DIO write completion notifications. Specifically, when a request is...

8.5CVSS7.7AI score0.07644EPSS
SaveExploits3References529
OSV
OSV
added 2025/08/15 11:15 p.m.10 views

CVE-2025-52621

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning...

7.5CVSS5.8AI score0.00154EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/15 11:15 p.m.16 views

CVE-2025-52621

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning...

7.5CVSS0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/15 10:45 p.m.8 views

CVE-2025-52621 HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning...

5.3CVSS7.2AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/15 10:45 p.m.22 views

CVE-2025-52621 HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning...

5.3CVSS0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/15 10:45 p.m.28 views

CVE-2025-52621

CVE-2025-52621 affects HCL BigFix SaaS Authentication Service. The issue is a cache-poisoning risk caused by the presence of an Origin header in HTTP responses coupled with an unvalidated reflection of that Origin value. Documents confirm the vulnerability but do not provide attack vectors, explo...

7.5CVSS7.2AI score0.00154EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/08/15 11:09 a.m.5 views

OESA-2025-2002 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAXSKBFRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935...

5.5CVSS6.3AI score0.01278EPSS
SaveExploits8References5
OSV
OSV
added 2025/08/15 11:09 a.m.9 views

OESA-2025-2004 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAXSKBFRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935...

5.5CVSS6.3AI score0.01278EPSS
SaveExploits8References5
OSV
OSV
added 2025/08/15 11:09 a.m.20 views

OESA-2025-2003 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAXSKBFRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935...

5.5CVSS6.3AI score0.01278EPSS
SaveExploits8References5
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-1010024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE:...

5.3CVSS6.1AI score0.03193EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2025-22049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: Increase ARCHDMAMINALIGN up to 16 ARCHDMAMINALIGN is 1 by default, but some...

7.8CVSS5.7AI score0.00204EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-44973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm, slub: do not call doslabfree for kfence object In 782f8906f805 the freeing of kfence...

8.1CVSS6.1AI score0.00439EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2024-33601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's nscd netgroup cache uses xmalloc or xrealloc and these...

7.3CVSS6.2AI score0.01075EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/15 12:00 a.m.12 views

HCL BigFix SaaS Authentication Service 安全漏洞

HCL BigFix SaaS Authentication Service is an endpoint management platform from HCL India. A security vulnerability exists in HCL BigFix SaaS Authentication Service that stems from an unvalidated Origin header value, which could lead to cache poisoning...

7.5CVSS6.8AI score0.00154EPSS
SaveExploits0References2
Rows per page
Query Builder