Astra Linux – Vulnerability in Linux, Linux 5.10

A guest can force the Linux netback driver to consume a large amount of kernel memory. This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVEs. Incoming data packets for a guest in the Linux kernel’s netback driver are buffere...

CVE-2026-28715

Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

CVE-2026-28715

Sensitive information disclosure due to improper authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001436 advisory. Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001453 advisory. Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which...

EUVD-2021-15371

Malware in sbrugna...

CVE-2024-28715

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint...

CVE-2020-28715

An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service DoS...

CVE-2024-28715

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint...

CVE-2024-28715

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint...

CVE-2024-28715

Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint...

CVE-2024-28715

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in DOraCMS v.2.18 and before . A remote attacker can execute arbitrary code by exploiting the markdown0 function within the —/app/public/apidoc/oas3/wrap-components/markdown.jsx—endpoint. Exploitation can be achieved via a URL like ‘http...

CVE-2023-28715

creationtimestamp| type| source ---|---|--- 2024-03-06 11:41:14+00:00| seen| https://t.me/ctinow/201221...

CVE-2023-28715

CVE-2023-28715: Improper access control in Intel oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially cause denial of service via local access. Affected products include Intel oneAPI Toolkits and installers prior to 4.3.2. Root cause...

CVE-2023-28715

Improper access control in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-28715

Improper access control in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-28715

creationtimestamp| type| source ---|---|--- 2023-08-21 16:40:53+00:00| seen| https://t.me/cibsecurity/68882...

CVE-2020-28715

CVE-2020-28715 affects the LeEco LeTV X43 family, specifically the kdmserver service with the version string V2401RCN02C080080B04121S. The available connected documents describe an issue allowing attackers to execute arbitrary code, escalate privileges, and cause a denial of service. The target i...

CVE-2020-28715

An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service DoS...

SUSE CVE-2021-28715

Guest can force Linux netback driver to hog large amounts of kernel memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the...