Lucene search
K

34 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/06 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2022-21641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.29 and prior. Easily...

4.9CVSS5.5AI score0.00457EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 7:11 p.m.6 views

CVE-2021-21641

A cross-site request forgery CSRF vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds...

4.3CVSS6.7AI score0.00475EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:51 p.m.5 views

CVE-2020-21641

Out-of-Band XML External Entity OOB-XXE vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file...

7.5CVSS7.1AI score0.04582EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/01/20 10:53 a.m.6 views

CVE-2025-21641

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS6.9AI score0.00033EPSS
Exploits0References4
NVD
NVD
added 2025/01/19 11:15 a.m.14 views

CVE-2025-21641

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS0.00033EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2025/01/19 11:15 a.m.6 views

CVE-2025-21641

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS6.3AI score0.00033EPSS
Exploits0References4
Circl
Circl
added 2025/01/19 10:57 a.m.5 views

CVE-2025-21641

creationtimestamp| type| source ---|---|--- 2025-01-19 10:57:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113854659075710792 2025-01-19 10:58:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2324 2025-01-19 11:15:47+00:00| seen|...

5.5CVSS6.7AI score0.00033EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/01/19 10:17 a.m.10 views

CVE-2025-21641 mptcp: sysctl: blackhole timeout: avoid using current->nsproxy

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

0.00033EPSS
Exploits0References2
CVE
CVE
added 2025/01/19 10:17 a.m.82 views

CVE-2025-21641

CVE-2025-21641 concerns the Linux kernel, where the mptcp: sysctl: blackhole timeout vulnerability could occur from using current->nsproxy. The issue arises from reading net namespace data via the current task, which could be NULL for certain states (e.g., task exiting), risking a null pointer...

5.5CVSS7AI score0.00033EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2025/01/19 10:17 a.m.9 views

CVE-2025-21641

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS5.6AI score0.00033EPSS
Exploits0
OSV
OSV
added 2025/01/19 10:17 a.m.7 views

CVE-2025-21641 mptcp: sysctl: blackhole timeout: avoid using current->nsproxy

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS5.7AI score0.00033EPSS
Exploits0References5
CVE
CVE
added 2024/01/05 9:2 p.m.70 views

CVE-2024-21641

Summary: CVE-2024-21641 affects Flarum versions before 1.8.5, where the /logout redirect parameter can be abused to redirect users to arbitrary links within a trusted domain, enabling open redirects. Impact: Unauthenticated users could be redirected by a trusted Flarum instance; for logged-in use...

6.5CVSS4.6AI score0.37939EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2023/11/15 5:1 p.m.0 views

CVE-2022-21641

creationtimestamp| type| source ---|---|--- 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5993...

4.9CVSS6.2AI score0.00457EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/04 4:46 a.m.18 views

CVE-2023-21641 Permissions, Privileges, and Access Controls in Display

An app with non-privileged access can change global system brightness and cause undesired system behavior...

6.6CVSS7.8AI score0.00038EPSS
Exploits0References1
CVE
CVE
added 2023/07/04 4:46 a.m.93 views

CVE-2023-21641

CVE-2023-21641 concerns Qualcomm display-related code. A local attacker with non-privileged access can change the device’s global brightness, leading to undesired system behavior. The vulnerability is categorized as Moderate in Qualcomm/Pixel entries, and public documentation indicates exposure i...

7.8CVSS6.8AI score0.00038EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/04 4:46 a.m.13 views

CVE-2023-21641 Permissions, Privileges, and Access Controls in Display

An app with non-privileged access can change global system brightness and cause undesired system behavior...

6.6CVSS7AI score0.00038EPSS
Exploits0References1
CBLMariner
CBLMariner
added 2022/11/24 12:46 a.m.24 views

CVE-2022-21641 affecting package mysql 8.0.29-1

CVE-2022-21641 affecting package mysql 8.0.29-1. An upgraded version of the package is available that resolves this issue...

4.9CVSS9.8AI score0.00457EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2022/11/15 12:27 p.m.28 views

CVE-2022-21641

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

4.9CVSS1.8AI score0.00457EPSS
Exploits0References3
CBLMariner
CBLMariner
added 2022/11/03 8:38 p.m.16 views

CVE-2022-21641 affecting package mysql for versions less than 8.0.31-1

CVE-2022-21641 affecting package mysql for versions less than 8.0.31-1. An upgraded version of the package is available that resolves this issue...

4.9CVSS6.1AI score0.00457EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/10/20 12:0 a.m.21 views

Oracle MySQL Server 8.0 <= 8.0.29 Security Update (cpuoct2022) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

6.5CVSS6.7AI score0.00693EPSS
Exploits0References2
Rows per page
Query Builder