Lucene search
K

730 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-71094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from t...

5.5CVSS5.9AI score0.00114EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 11:26 a.m.9 views

CVE-2021-33627

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate function of the EFISMMCOMMUNICATIONPROTOC...

8.2CVSS7.1AI score0.00327EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/09 12:0 a.m.5 views

SUSE SLES12 Security Update : libpcap (SUSE-SU-2026:0062-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0062-1 advisory. - CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. Tenable ha...

1.9CVSS5.5AI score0.00098EPSS
Exploits0References4
OSV
OSV
added 2026/01/08 4:16 p.m.1 views

SUSE-SU-2026:20064-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. - CVE-2024-8006: missing return value check in pcapfindalldevsex can lead to NULL pointer dereference...

4.4CVSS5.8AI score0.0022EPSS
Exploits0References7
SUSE Linux
SUSE Linux
added 2026/01/08 9:36 a.m.4 views

Security update for libpcap

This update for libpcap fixes the following issues: CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

4.8CVSS7AI score0.00098EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2026/01/08 9:36 a.m.5 views

Security update for libpcap

This update for libpcap fixes the following issues: CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

4.8CVSS6.9AI score0.00098EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2026/01/06 10:22 a.m.6 views

Security update for libpcap

This update for libpcap fixes the following issues: CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

4.8CVSS7AI score0.00098EPSS
Exploits0References4
OSV
OSV
added 2026/01/06 10:22 a.m.1 views

SUSE-SU-2026:0036-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in pcapetheraton can lead to out-of-bounds read and write bsc1255765...

1.9CVSS5.8AI score0.00098EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/29 3:55 p.m.5 views

CVE-2025-69206 Hemmelig has SSRF Filter bypass in Secret Request functionality

Hemmelig is a messing app with with client-side encryption and self-destructing messages. Prior to version 7.3.3, a Server-Side Request Forgery SSRF filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature. The application attempts to block internal/private ...

4.3CVSS6.3AI score0.0019EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.4 views

PT-2025-53764

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software suffers from an open redirect issue, allowing an attacker to redirect users to a malicious website. This occurs due to improper validation of user-supplied URLs. The issue involves...

6.1CVSS6.3AI score0.00144EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/22 12:0 a.m.11 views

AlmaLinux 8 : python39:3.9 (ALSA-2025:23530)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23530 advisory. python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used CVE-2024-5642 python: Virtual environment venv activation scripts don't...

9.4CVSS6.8AI score0.01499EPSS
Exploits14References14
Tenable Nessus
Tenable Nessus
added 2025/12/18 12:0 a.m.7 views

RockyLinux 8 : python39:3.9 (RLSA-2025:23530)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23530 advisory. python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used CVE-2024-5642 python: Virtual environment venv activation scripts don'...

9.4CVSS6.8AI score0.01499EPSS
Exploits14References25
Github Security Blog
Github Security Blog
added 2025/12/16 3:30 p.m.8 views

openshift-apiserver: SSRF via Missing IP/Network-Range Validation in User-Supplied Image References

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential Denial of Service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS5.8AI score0.00306EPSS
Exploits0References6Affected Software1
Snyk
Snyk
added 2025/12/16 3:30 p.m.4 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the ImageStreamImport mechanism that handles user-supplied image references without proper IP address and network-range validation. An attacker can access internal network resources, enumerate service...

8.5CVSS5.7AI score0.00306EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/16 12:14 p.m.29 views

CVE-2025-14443 Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS0.00306EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/16 12:14 p.m.5 views

CVE-2025-14443 Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service DoS through Server-Side Request Forgery SSRF due to missing IP address and network-range validation when processi...

6.4CVSS6AI score0.00306EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/12 4:0 p.m.5 views

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS6.4AI score0.00142EPSS
Exploits0References1
NVD
NVD
added 2025/12/11 4:16 p.m.10 views

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS0.00142EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/11 3:19 p.m.25 views

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS0.00142EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 3:19 p.m.4 views

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

3.1CVSS5.9AI score0.00142EPSS
Exploits0References1
Rows per page
Query Builder