Lucene search
+L

5619 matches found

OSV
OSV
added 2024/11/19 6:15 p.m.16 views

AZL-53879 CVE-2024-53081 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of the variables, this may underflow. Fix it ensuring that bot...

5.5CVSS6.9AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/19 6:15 p.m.9 views

UBUNTU-CVE-2024-53081

In the Linux kernel, the following vulnerability has been resolved: media: ar0521: don't overflow when checking PLL values The PLL checks are comparing 64 bit integers with 32 bit ones, as reported by Coverity. Depending on the values of the variables, this may underflow. Fix it ensuring that bot...

5.5CVSS6.6AI score0.00228EPSS
SaveExploits0References19
Packet Storm
Packet Storm
added 2024/11/05 12:00 a.m.355 views

ABB Cylon Aspect 3.08.00 Off-By-One

ABB Cylon Aspect 3.08.00 logMix/YumLookup.php Off-by-One Error in Log Parsing Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.00 Summary: ASPECT is an award-winning scalable building energy...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/10/28 12:00 a.m.231 views

ABB Cylon Aspect 3.08.01 getApplicationNamesJS.php Building/Project Name Exposure

ABB Cylon Aspect 3.08.01 getApplicationNamesJS.php Building/Project Name Exposure Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building...

7.4AI score
SaveExploits0
zdt
zdt
added 2024/10/22 12:00 a.m.258 views

ABB Cylon Aspect 3.08.01 networkDiagAjax.php Remote Network Utility Execution Vulnerability

ABB Cylon Aspect version 3.08.01 allows an unauthenticated attacker to perform network operations such as ping, traceroute, or nslookup on arbitrary hosts or IPs by sending a crafted GET request to networkDiagAjax.php. This could be exploited to interact with or probe internal or external systems...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/10/21 8:15 p.m.11 views

UBUNTU-CVE-2022-49030

In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, so 2 maxentries will overflow u32 when mapping producer page and data pages. Only casting maxentries to sizet is not enough, because...

7.8CVSS6.2AI score0.00276EPSS
SaveExploits0References7
OSV
OSV
added 2024/10/21 8:06 p.m.18 views

CVE-2022-49030 libbpf: Handle size overflow for ringbuf mmap

In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-64 host, so 2 maxentries will overflow u32 when mapping producer page and data pages. Only casting maxentries to sizet is not enough, because...

7.8CVSS5.8AI score
SaveExploits0References7
Cvelist
Cvelist
added 2024/10/21 6:02 p.m.39 views

CVE-2024-49997 net: ethernet: lantiq_etop: fix memory disclosure

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiqetop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skbputpadto to pad Ethernet frames...

0.01064EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/10/21 6:02 p.m.20 views

CVE-2024-49997 net: ethernet: lantiq_etop: fix memory disclosure

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiqetop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skbputpadto to pad Ethernet frames...

7AI score0.01064EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/10/21 6:01 p.m.16 views

CVE-2024-49868 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion BUG Syzbot reported a NULL pointer dereference with the following crash: FAULTINJECTION: forcing a failure. starttransaction+0x830/0x1670...

6.9AI score0.00288EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:00 a.m.15 views

Adobe Premiere Pro < 14.5 Arbitrary Code Execution (APSB20-64) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 14.5. It is, therefore, affected by a vulnerability as referenced in the APSB20-64 advisory. - Adobe Premiere Pro version 14.4 and earlier is affected by an uncontrolled search path element that could result in...

7.8CVSS8.2AI score0.01159EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of a size overflow in the libbpf's ringbuf mmap operation, which could affect mmap...

7.8CVSS7.1AI score0.00276EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2024/10/18 12:00 a.m.332 views

ABB Cylon Aspect 3.08.01 databaseFileDelete.php Command Injection

ABB Cylon Aspect 3.08.01 databaseFileDelete.php Remote Code Execution Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy...

7.4AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 12:53 p.m.6 views

Malicious code in freebsd-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/10/12 7:00 a.m.9 views

arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry

...

5.5CVSS6.5AI score0.00251EPSS
SaveExploits0
Circl
Circl
added 2024/10/11 7:45 a.m.12 views

CVE-2018-0208

creationtimestamp| type| source ---|---|--- 2024-10-11 07:45:56+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/64...

5.4CVSS5.4AI score0.0079EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/08 12:00 a.m.20 views

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

8.8CVSS6.4AI score0.01489EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/03 5:15 p.m.20 views

CVE-2024-7826

Improper Check for Unusual or Exceptional Conditions vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit wrURL.Dll modules allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3...

9.8CVSS0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/03 5:15 p.m.31 views

CVE-2024-7825

Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit wrUrl.Dll modules allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3...

9.8CVSS0.00365EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/03 5:15 p.m.41 views

CVE-2024-7824

Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit wrUrl.Dll modules allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3...

9.8CVSS0.00423EPSS
SaveExploits0References1
Rows per page
Query Builder