Lucene search
K

111 matches found

OSV
OSV
added yesterday2 views

ROOT-OS-DEBIAN-11-CVE-2024-25742 CVE-2024-25742 in rootio-linux - Patched by Root

Root has patched CVE-2024-25742 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

6.5CVSS6.8AI score0.0018EPSS
Exploits0
OSV
OSV
added yesterday3 views

ROOT-OS-DEBIAN-12-CVE-2024-25742 CVE-2024-25742 in rootio-linux - Patched by Root

Root has patched CVE-2024-25742 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

6.5CVSS6.9AI score0.0018EPSS
Exploits0
Circl
Circl
added 2025/03/13 8:14 p.m.4 views

CVE-2021-25742

creationtimestamp| type| source ---|---|--- 2025-03-13 20:14:03+00:00| seen| https://gist.github.com/AyushyaChitransh/3b69f94e19b188ba41ee0c49a282e64c 2025-03-31 08:40:46+00:00| seen| https://bsky.app/profile/uchi-mata.bsky.social/post/3llnxk6qaw223 2025-04-23 21:32:11+00:00| seen|...

7.6CVSS7.1AI score0.01784EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-25742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pcichangeirqlevel in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pcigetbus might not return a valid pointer. CVE-2020-25742 Note th...

3.2CVSS6.2AI score0.00467EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2024-25742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 VC at any point in time and can trigger its handler. This affects AMD...

6.5CVSS6.6AI score0.0018EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/02/14 1:42 p.m.17 views

CVE-2025-25742

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module...

9.8CVSS7.7AI score0.00578EPSS
Exploits1References1
NVD
NVD
added 2025/02/12 5:15 p.m.21 views

CVE-2025-25742

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module...

9.8CVSS0.00578EPSS
Exploits1References1
Circl
Circl
added 2025/02/12 4:52 p.m.21 views

CVE-2025-25742

creationtimestamp| type| source ---|---|--- 2025-02-12 16:52:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113991952099305051 2025-02-12 17:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyogajtis2d 2025-02-12 18:19:48+00:00| seen|...

9.8CVSS6.9AI score0.00578EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/02/12 12:0 a.m.7 views

CVE-2025-25742

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module...

8AI score0.00578EPSS
Exploits1References1
CVE
CVE
added 2025/02/12 12:0 a.m.105 views

CVE-2025-25742

D-Link DIR-853 A1 firmware FW1.20B07 contains a stack-based buffer overflow in the SetSysEmailSettings module, triggered by the AccountPassword parameter. Affected product: DIR-853; CVE-2025-25742. Impact is high: CVSS v3.1 base score 9.8 (CRITICAL) with network attack, no user interaction requir...

9.8CVSS7.8AI score0.00578EPSS
Exploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/06 2:0 a.m.7 views

CVE-2022-25742

Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...

7.5CVSS7AI score0.00383EPSS
Exploits0References1
Oracle linux
Oracle linux
added 2024/11/22 12:0 a.m.49 views

edk2 security update

Mon Sep 09 2024 Aaron Young - Create new 20240909 release for OL9 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK...

7.5CVSS7.4AI score0.95764EPSS
Exploits28
Tenable Nessus
Tenable Nessus
added 2024/10/23 12:0 a.m.53 views

Oracle Linux 8 : edk2 (ELSA-2024-12795)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12795 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

7.5CVSS7.2AI score0.00986EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:0 a.m.32 views

Oracle Linux 7 : edk2 (ELSA-2024-12793)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-12793 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

7.5CVSS7.2AI score0.00986EPSS
Exploits0References5
Oracle linux
Oracle linux
added 2024/10/18 12:0 a.m.67 views

edk2 security update

1.7.1 - Create new 1.7.1 release for OL7 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux kernel...

7.5CVSS7.3AI score0.00986EPSS
Exploits0
Oracle linux
Oracle linux
added 2024/10/18 12:0 a.m.50 views

edk2 security update

1.7.1 - Create new 1.7.1 release for OL7 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux kernel...

7.5CVSS7.3AI score0.00986EPSS
Exploits0
Ubuntu
Ubuntu
added 2024/08/13 12:13 a.m.63 views

USN-6957-1: Linux kernel (Oracle) vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to...

9.8CVSS7.7AI score0.01305EPSS
Exploits2
OSV
OSV
added 2024/08/13 12:13 a.m.12 views

USN-6957-1 linux-oracle-5.15 vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to...

9.8CVSS7.2AI score0.01305EPSS
Exploits2References57
Tenable Nessus
Tenable Nessus
added 2024/08/13 12:0 a.m.76 views

Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6952-2)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6952-2 advisory. Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and...

9.8CVSS7.8AI score0.01483EPSS
Exploits3References233
Tenable Nessus
Tenable Nessus
added 2024/08/13 12:0 a.m.50 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6956-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6956-1 advisory. Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC...

8.1CVSS7.3AI score0.01305EPSS
Exploits2References56
Rows per page
Query Builder