Lucene search
+L

22 matches found

OSV
OSV
added 5 days ago14 views

ROOT-OS-DEBIAN-13-CVE-2025-38736 CVE-2025-38736 in linux - Patched by Root

Root has patched CVE-2025-38736 in the linux package for Root:Debian:13. Multiple fixed versions available...

7.1CVSS6.5AI score0.00163EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:0 a.m.6 views

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-38736)

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits 0-31. Without this mask, invalid PHY...

7.1CVSS6.3AI score0.00163EPSS
SaveExploits0References4
Circl
Circl
added 2026/01/08 4:3 p.m.7 views

CVE-2025-38736

creationtimestamp| type| source ---|---|--- 2026-01-08 16:03:15+00:00| seen| Telegram/wLl24cbUdbdvufUNFyR-AVzoQiHE4u9cukp9xk0DQOdzswo 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10 2026-07-28 16:19:30+00:00| seen|...

7.1CVSS6.8AI score0.00163EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/10 4:40 a.m.3 views

EUVD-2025-38736

Malicious code in ocha-ubi100-sukiwir npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/09/06 6:2 a.m.4 views

BELL-CVE-2025-38736

Bulletin has no description...

7.1CVSS6.1AI score0.00163EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/06 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported...

7.1CVSS5.7AI score0.00163EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/05 9:53 p.m.7 views

CVE-2025-38736

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits 0-31. Without this mask, invalid PHY...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References4
NVD
NVD
added 2025/09/05 6:15 p.m.5 views

CVE-2025-38736

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits 0-31. Without this mask, invalid PHY...

7.1CVSS0.00163EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/09/05 5:20 p.m.10 views

CVE-2025-38736

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits 0-31. Without this mask, invalid PHY...

7.1CVSS6AI score0.00163EPSS
SaveExploits0
OSV
OSV
added 2025/09/05 5:20 p.m.4 views

CVE-2025-38736 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits 0-31. Without this mask, invalid PHY...

6AI score
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2024/07/12 3:21 p.m.19 views

CVE-2024-38736 WordPress Realtyna Organic IDX plugin <= 4.14.13 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Realtyna Realtyna Organic IDX plugin allows Code Injection.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.13...

9.1CVSS7.4AI score0.00489EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/07/11 12:0 a.m.14 views

WordPress Realtyna Organic IDX plugin Plugin <= 4.14.13 is vulnerable to Arbitrary File Upload

Software Realtyna Organic IDX plugin Type Plugin Vulnerable versions = 4.14.13 Fixed in 4.14.14 OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Upload CVE CVE-2024-38736 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 7d42084b6471 Credits Peng Zhou...

9.1CVSS6.6AI score0.00489EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2023/09/08 10:21 p.m.12 views

CVE-2023-38736

creationtimestamp| type| source ---|---|--- 2023-09-08 22:21:37+00:00| seen| https://t.me/cibsecurity/70159...

7.8CVSS7.5AI score0.00391EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/08 6:49 p.m.70 views

CVE-2023-38736

Consolidated details from IBM and security trackers confirm CVE-2023-38736 affects IBM QRadar WinCollect Agent versions 10.0–10.1.6 when installed to run as ADMIN or SYSTEM. The vulnerability enables local privilege escalation from a non-privileged user to SYSTEM permissions. Remediation in the p...

7.8CVSS7.7AI score0.00391EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/08 6:49 p.m.38 views

CVE-2023-38736 IBM QRadar WinCollect Agent privilege escalation

IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542...

7.5CVSS7.8AI score0.00391EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/06 10:47 p.m.91 views

Security Bulletin: IBM QRadar WinCollect Agent is vulnerable to a local escalation of privilege attack in some configurations (CVE-2023-38736)

Summary IBM QRadar WinCollect Agent when installed to run as Admin or System, or with Admin or System privileges, is vulnerable to a local escalation of privilege attack that a non-privileged user could utilize to gain System permissions. IBM has addressed the relevant vulnerability. Vulnerabilit...

7.8CVSS7.8AI score0.00391EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/03/01 8:15 a.m.14 views

CVE-2022-38736

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

6.6AI score
SaveExploits0
Circl
Circl
added 2022/10/28 6:34 p.m.9 views

CVE-2021-38736

creationtimestamp| type| source ---|---|--- 2022-10-28 18:34:37+00:00| seen| https://t.me/cibsecurity/52216...

9.8CVSS8.7AI score0.00807EPSS
SaveExploits1References1
NVD
NVD
added 2022/10/28 3:15 p.m.22 views

CVE-2021-38736

SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...

9.8CVSS0.00807EPSS
SaveExploits1References2
CVE
CVE
added 2022/10/28 12:0 a.m.56 views

CVE-2021-38736

The CVE-2021-38736 entry concerns SEMCMS Shop v1.1 with a SQL injection vulnerability in Ant_Global.php. The issue is documented as a high-severity (CVSS v3.1: 9.8, CRITICAL) vulnerability affecting confidentiality, integrity, and availability (C/H/I/A). Connected sources confirm the affected com...

9.8CVSS9.8AI score0.00807EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder