CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1728 matches found

NVD•added 2025/12/06 10:15 p.m.•9 views

CVE-2025-40284

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: cancel mesh send timer when hdev removed meshsenddone timer is not canceled when hdev is removed, which causes crash if the timer triggers after hdev is gone. Cancel the timer when MGMT removes the hdev, like oth...

0.00162EPSS

Exploits0References5

Redos•added 2025/11/25 12:0 a.m.•9 views

ROS-20251125-01

A vulnerability in the cross-platform software development framework Qt is related to a bug in the data boundary checking when reading data from Bluetooth L2CAP socket in processUnsolicitedReply and processReply in bluetooth/qlowenergycontrollerbluez.cpp. Exploitation of the vulnerability could...

3.1CVSS7.9AI score0.00172EPSS

Exploits0

Tenable Nessus•added 2025/11/20 12:0 a.m.•6 views

TencentOS Server 4: bluez (TSSA-2024:0357)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0357 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.1CVSS6.9AI score0.07879EPSS

Exploits8References2

OSV•added 2025/11/13 11:0 a.m.•9 views

CLSA-2025-1763031616 bluez: Fix of 10 CVEs

CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow...

8CVSS7.3AI score0.07879EPSS

Exploits8References1

Tenable Nessus•added 2025/10/24 12:0 a.m.•6 views

NewStart CGSL MAIN 7.02 : kernel-modules-sub Multiple Vulnerabilities (NS-SA-2025-0250)

The remote NewStart CGSL host, running version MAIN 7.02, has kernel-modules-sub packages installed that are affected by multiple vulnerabilities: - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to...

8.8CVSS7.7AI score0.02033EPSS

Exploits0References5

Tenable Nessus•added 2025/10/14 12:0 a.m.•1 views

SUSE SLES12 Security Update : bluez (SUSE-SU-2025:03590-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03590-1 advisory. - CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections bsc1217877. Tenable has extracted the preceding...

6.3CVSS7.2AI score0.07879EPSS

Exploits8References4

SUSE Linux•added 2025/10/13 12:59 p.m.•2 views

Security update for bluez

This update for bluez fixes the following issues: CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections bsc1217877. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.3CVSS7.7AI score0.07879EPSS

Exploits8References4

OSV•added 2025/10/13 12:59 p.m.•3 views

SUSE-SU-2025:03590-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections bsc1217877...

6.3CVSS6.1AI score0.07879EPSS

Exploits8References3