CVE-2022-21759

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

Photon OS 5.0: Linux PHSA-2025-5.0-0512

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0512. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-090)

The version of kernel installed on the remote host is prior to 5.10.236-227.928. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-090 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of enc...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-070)

The version of kernel installed on the remote host is prior to 5.15.180-122.191. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-070 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-throttle: Set BIOTHROTTLED when...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-947)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-947 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfsdecref properly CVE-2024-46753 In the Linux kernel, the following vulnerability has been...

CVE-2025-21759 affecting package kernel for versions less than 6.6.82.1-1

CVE-2025-21759 affecting package kernel for versions less than 6.6.82.1-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2025-21759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: extend RCU protection in igmp6send igmp6send can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the ne...

CVE-2025-21759

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6send igmp6send can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF. Note that we no longer can use...

CVE-2025-21759 ipv6: mcast: extend RCU protection in igmp6_send()

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6send igmp6send can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF. Note that we no longer can use...

CVE-2025-21759 ipv6: mcast: extend RCU protection in igmp6_send()

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6send igmp6send can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF. Note that we no longer can use...

CVE-2024-21759

creationtimestamp| type| source ---|---|--- 2024-07-09 18:58:02+00:00| seen| https://t.me/cvedetector/377...

CVE-2024-21759

An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP or HTTPS requests...

CVE-2024-21759

An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP or HTTPS requests...

CVE-2024-21759

Fortinet FortiPortal versions 7.0.0–7.0.6 and 7.2.0 are affected by an authorization bypass via a user-controlled key in the administration interface. This allows a remote attacker to view unauthorized resources through HTTP/HTTPS requests. Root cause and exact remediation details are not provide...

CVE-2024-21759

An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP or HTTPS requests...

CVE-2023-51606 Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-51606 Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-21759

creationtimestamp| type| source ---|---|--- 2023-01-11 00:35:06+00:00| seen| https://t.me/cibsecurity/56286...

CVE-2023-21759

CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...

CVE-2022-21759

CVE-2022-21759 describes an out-of-bounds write in the power service caused by a missing bounds check, enabling local privilege escalation to System privileges without user interaction. Multiple sources (NVD, Red Hat, PRION, CVE lists) confirm the issue and states a patch is available (Patch ID A...