Lucene search
K

35 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-21662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails...

5.5CVSS6.2AI score0.0003EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/17 12:0 a.m.53 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:0499-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0499-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The...

7.8CVSS7.9AI score0.02038EPSS
Exploits5References806
RedhatCVE
RedhatCVE
added 2025/01/21 5:29 p.m.5 views

CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

5.5CVSS7AI score0.0003EPSS
Exploits0References4
NVD
NVD
added 2025/01/21 1:15 p.m.5 views

CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

5.5CVSS0.0003EPSS
Exploits0References5
OSV
OSV
added 2025/01/21 12:18 p.m.6 views

CVE-2025-21662 net/mlx5: Fix variable not being completed when function returns

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

5.5CVSS6.2AI score0.0003EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2025/01/21 12:18 p.m.4 views

CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

5.5CVSS5.7AI score0.0003EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2025/01/21 12:0 a.m.5 views

CVE-2025-21662

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...

5.5CVSS6.4AI score0.0003EPSS
Exploits0References22
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.21 views

CVE-2023-50210 D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this...

8.8CVSS9.2AI score0.0488EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.14 views

CVE-2023-50210 D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this...

8.8CVSS7.8AI score0.0488EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/04/10 12:41 p.m.42 views

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.1 security update

An update is now available for Red Hat OpenShift GitOps v1.12.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS6.6AI score0.02176EPSS
Exploits2References6
RedHat Linux
RedHat Linux
added 2024/04/10 12:21 p.m.63 views

Important: Red Hat Security Advisory: GitOps 1.12.1- Argo CD CLI and MicroShift GitOps security update

An update is now available for Red Hat OpenShift GitOps v1.12.1 for Argo CD CLI and MicroShift GitOps. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

9.8CVSS6.6AI score0.02176EPSS
Exploits2References7
Tenable Nessus
Tenable Nessus
added 2024/04/10 12:0 a.m.57 views

RHEL 8 / 9 : GitOps 1.12.1- Argo CD CLI and MicroShift GitOps (RHSA-2024:1752)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1752 advisory. Errata Advisory for Red Hat OpenShift GitOps v1.12.1- Argo CD CLI and MicroShift GitOps. Security Fixes: argo-cd: Denial of Service Due ...

9.8CVSS6.7AI score0.02176EPSS
Exploits2References13
RedHat Linux
RedHat Linux
added 2024/04/08 4:37 p.m.26 views

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.10.4 security update

An update is now available for Red Hat OpenShift GitOps v1.10.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

9.8CVSS6.6AI score0.02176EPSS
Exploits2References8
NVD
NVD
added 2024/03/18 7:15 p.m.17 views

CVE-2024-21662

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in security can be combine...

9.1CVSS8AI score0.00075EPSS
Exploits1References5
Chainguard
Chainguard
added 2024/03/18 7:15 p.m.24 views

CVE-2024-21662 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

9.1CVSS7.3AI score0.00075EPSS
Exploits1
OSV
OSV
added 2024/03/18 6:42 p.m.37 views

CVE-2024-21662 Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in security can be combine...

7.5CVSS7AI score0.00403EPSS
Exploits2References7
CVE
CVE
added 2024/03/18 6:42 p.m.310 views

CVE-2024-21662

CVE-2024-21662 (Argo CD) is a brute-force protection bypass caused by a weak cache-based login attempt tracker. The vulnerability centers on a per-user login attempt cache capped at 1000 entries (defaultMaxCacheSize). An attacker can overload the cache with login attempts for many users, causing ...

9.1CVSS7.9AI score0.00075EPSS
Exploits1References5Affected Software1
Circl
Circl
added 2023/09/05 12:16 p.m.0 views

CVE-2023-21662

creationtimestamp| type| source ---|---|--- 2023-09-05 12:16:56+00:00| seen| https://t.me/cibsecurity/69822...

7.8CVSS7.5AI score0.00059EPSS
Exploits0References1
CVE
CVE
added 2023/09/05 6:24 a.m.69 views

CVE-2023-21662

CVE-2023-21662 describes memory corruption in Qualcomm’s Core Platform when printing the response buffer to the log. The initial CVE summary identifies a HIGH-severity issue (CVSS 3.1: 7.8) with local access and rights requirements, affecting Qualcomm closed-source Core Platform components. Conne...

7.8CVSS8AI score0.00059EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/05 6:24 a.m.7 views

CVE-2023-21662 Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory corruption in Core Platform while printing the response buffer in log...

7.8CVSS8AI score0.00059EPSS
Exploits0References1
Rows per page
Query Builder