MAL-2025-38139 Malicious code in vantage_jpish_o1epe_driftwood (npm)

The package vantagejpisho1epedriftwood was found to contain malicious code...

BELL-CVE-2025-38139

Bulletin has no description...

CVE-2025-38139

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting of the subrequest iterator in netfsretrywritestream to use the iterator-reset function as the iterator may have been shortened by a previous...

CVE-2025-38139 netfs: Fix oops in write-retry from mis-resetting the subreq iterator

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting of the subrequest iterator in netfsretrywritestream to use the iterator-reset function as the iterator may have been shortened by a previous...

CVE-2025-38139

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting of the subrequest iterator in netfsretrywritestream to use the iterator-reset function as the iterator may have been shortened by a previous...

Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk

A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain circumstances. The vulnerability, tracked as CVE-2024-9486 CVSS score: 9.8, has been addressed in version 0.1.38. The project maintainers...

CVE-2024-38139

creationtimestamp| type| source ---|---|--- 2024-10-16 02:08:50+00:00| seen| https://t.me/cvedetector/7984...

CVE-2024-38139 Microsoft Dataverse Elevation of Privilege Vulnerability

...

Microsoft Windows Multiple Vulnerabilities (KB5030219)

This host is missing an important security update according to Microsoft KB5030219 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-38139

creationtimestamp| type| source ---|---|--- 2023-09-12 20:29:16+00:00| seen| https://t.me/cibsecurity/70325 2023-10-01 12:50:40+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9121 2024-04-18 16:45:00+00:00| seen|...

CVE-2023-38139

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-38139

CVE-2023-38139 is a Windows kernel vulnerability tied to registry hive refcount handling, contributing to hive memory corruption. The connected docs note refcount overflow risks in CM_KEY_SECURITY descriptors (and related loader logic), describing how overflow can trigger use-after-free and enabl...

KB5030261: Windows Server 2008 R2 Security Update (September 2023)

The remote Windows host is missing security update 5030261. It is, therefore, affected by multiple vulnerabilities - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - DHCP Server Service Information Disclosure Vulnerability CVE-2023-36801, CVE-2023-38152 - Windows...

KB5030220: Windows 10 LTS 1507 Security Update (September 2023)

The remote Windows host is missing security update 5030220. It is, therefore, affected by multiple vulnerabilities - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - Windows TCP/IP Denial of Service Vulnerability CVE-2023-38149 - Windows Miracast Wireless Display...

KB5030213: Windows 10 Version 1607 and Windows Server 2016 Security Update (September 2023)

The remote Windows host is missing security update 5030213. It is, therefore, affected by multiple vulnerabilities - DHCP Server Service Denial of Service Vulnerability CVE-2023-38162 - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - DHCP Server Service Informati...

CVE-2022-38139

creationtimestamp| type| source ---|---|--- 2022-09-13 18:25:26+00:00| seen| https://t.me/cibsecurity/49643...

CVE-2022-38139

Multiple Cross-Site Request Forgery CSRF vulnerabilities in RD Station plugin = 5.2.0 at WordPress...

CVE-2022-38139

The CVE-2022-38139 entry refers to multiple CSRF vulnerabilities in the WordPress RD Station plugin, affected versions 5.2.0 and earlier. Technical details from connected sources indicate the issue stems from missing CSRF checks in various parts of the plugin, enabling potential unauthorized acti...

CVE-2022-38139 WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities in RD Station plugin = 5.2.0 at WordPress...