15 matches found
BELL-CVE-2025-40174
Bulletin has no description...
SUSE CVE-2025-40174
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switchmmirqsoff Stephen noted that it is possible to not have an smpmb between the loadedmm store and the tlbgen load in switchmm, meaning the ordering against flushtlbmmrange goes out the window, and ...
CVE-2025-40174
creationtimestamp| type| source ---|---|--- 2025-11-12 12:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gntib3lq2w 2025-11-12 14:01:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5gss62ksdd2...
DEBIAN-CVE-2025-40174
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switchmmirqsoff Stephen noted that it is possible to not have an smpmb between the loadedmm store and the tlbgen load in switchmm, meaning the ordering against flushtlbmmrange goes out the window, and ...
CVE-2025-40174
Summary of CVE-2025-40174 : In the Linux kernel, the fix is in x86/mm: Fix SMP ordering in switch_mm_irqs_off(). The issue arose because an smp_mb() between the loaded_mm store and the tlb_gen load in switch_mm() could be missing, allowing the ordering against flush_tlb_mm_range() to be violated ...
MAL-2025-40174 Malicious code in yam-s5i-project (npm)
The package yam-s5i-project was found to contain malicious code...
CVE-2021-40174
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...
CVE-2023-40174
creationtimestamp| type| source ---|---|--- 2023-08-19 02:38:40+00:00| seen| https://t.me/cibsecurity/68854...
CVE-2023-40174
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Soci...
CVE-2023-40174
CVE-2023-40174 affects Social media skeleton (a PHP/CSS/JS/HTML project). The root cause is an insufficient session expiration due to improper lifecycle management of user sessions in versions prior to 1.0.5. The impact is described as high for confidentiality, integrity, and availability in the ...
CVE-2022-40174
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2021-40174
creationtimestamp| type| source ---|---|--- 2021-08-30 00:31:23+00:00| seen| https://t.me/cibsecurity/27989...
CVE-2021-40174
Zoho ManageEngine Log360 is affected by a CSRF vulnerability prior to Build 5224. The issue stems from insufficient validation of requests from trusted users, allowing an attacker to disable logon security settings. Reported CVSS scores indicate high impact (CVSS 3.1: base score 8.8, vector CVSS:...
