Lucene search
+L

20008 matches found

Positive Technologies
Positive Technologies
added 2025/01/29 12:00 a.m.12 views

PT-2025-31667 · Alpine · Alpine Ilx-507

Name of the Vulnerable Software and Affected Versions: Alpine iLX-507 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required, specifically, the target mus...

7.7CVSS7.6AI score0.00288EPSS
SaveExploits0References7
Redos
Redos
added 2025/01/28 12:00 a.m.182 views

ROS-20250128-07

A vulnerability in the HID Profile Human Interface Device interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to an access control flaw. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary commands...

8.8CVSS7.7AI score0.0202EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2025/01/27 7:04 p.m.31 views

USN-7179-4: Linux kernel (Xilinx ZynqMP) vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

8.8CVSS8.1AI score0.07693EPSS
SaveExploits7
OSV
OSV
added 2025/01/27 7:04 p.m.13 views

USN-7179-4 linux-xilinx-zynqmp vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

8.8CVSS7.5AI score0.07693EPSS
SaveExploits7References15
OSV
OSV
added 2025/01/27 2:04 p.m.20 views

SUSE-SU-2025:0262-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to brmstvlansetstate bsc1227784. - CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in brmstsetstate bsc1227781....

7.8CVSS7.2AI score0.00417EPSS
SaveExploits1References23
Redos
Redos
added 2025/01/27 12:00 a.m.9 views

ROS-20250127-02

A vulnerability in the Phone Book Access component of the Bluetooth protocol stack for Linux BlueZ is related to a buffer overflow. buffer overflow. Exploitation of the vulnerability allows an attacker acting remotely to execute arbitrary code Vulnerability in the Bluetooth technology stack for...

8CVSS8.2AI score0.0229EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/27 12:00 a.m.18 views

PT-2025-31664 · Alpine · Alpine Ilx-507

Name of the Vulnerable Software and Affected Versions: Alpine iLX-507 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this, as the targe...

7.7CVSS7.8AI score0.00278EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/01/27 12:00 a.m.19 views

PT-2025-31669 · Alpine · Alpine Ilx-507

Name of the Vulnerable Software and Affected Versions: Alpine iLX-507 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected devices. User interaction is required, specifically the target must connect to a malicious Bluetoot...

7.7CVSS7.9AI score0.00282EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/01/27 12:00 a.m.28 views

Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7179-4)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7179-4 advisory. Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type- confusion error. A physically proximate remote...

8.8CVSS8.3AI score0.07693EPSS
SaveExploits7References15
SUSE CVE
SUSE CVE
added 2025/01/26 3:47 a.m.12 views

SUSE CVE-2025-23050

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read or division by zero. This is fixed in 5.15.19, 6.5.9, and 6.8.2...

5.3CVSS6.9AI score0.00176EPSS
SaveExploits0References6
OSV
OSV
added 2025/01/24 11:08 a.m.15 views

OESA-2025-1078 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtprxrtssessionnew This patch enhances error handling in scenarios with RTS Request...

8CVSS5.4AI score0.01351EPSS
SaveExploits8References143
OSV
OSV
added 2025/01/24 11:08 a.m.14 views

OESA-2025-1081 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A race condition was found in the Linux kernel's net/bluetooth in conn,advmin,maxintervalset function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service. CVE-2024-24858 In t...

7.8CVSS6.7AI score0.00719EPSS
SaveExploits0References23
OSV
OSV
added 2025/01/24 11:08 a.m.13 views

OESA-2025-1080 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A race condition was found in the Linux kernel's net/bluetooth in conn,advmin,maxintervalset function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service. CVE-2024-24858 In t...

7.8CVSS6.3AI score0.00719EPSS
SaveExploits0References21
OSV
OSV
added 2025/01/24 10:10 a.m.16 views

SUSE-SU-2025:0231-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53095: smb: client: Fix use-after-free of network namespace bsc1233642. - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853. -...

9.8CVSS8.3AI score0.0202EPSS
SaveExploits3References142
SUSE Linux
SUSE Linux
added 2025/01/24 10:10 a.m.10 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-53095: smb: client: Fix use-after-free of network namespace bsc1233642. CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853...

8.8CVSS8AI score0.0202EPSS
SaveExploits3References282
SUSE Linux
SUSE Linux
added 2025/01/24 10:10 a.m.11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49035: media: s5pcec: limit msg.len to CECMAXMSGSIZE bsc1215304. CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853. CVE-2024-53156: wif...

8.8CVSS7.7AI score0.0202EPSS
SaveExploits0References76
SUSE Linux
SUSE Linux
added 2025/01/24 10:10 a.m.11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. CVE-2022-48742: rtnetlink: make sure to refresh masterdev/mops in...

8.8CVSS8.3AI score0.0202EPSS
SaveExploits2References408
OSV
OSV
added 2025/01/24 10:10 a.m.8 views

SUSE-SU-2025:0229-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. - CVE-2022-48742: rtnetlink: make sure to refresh masterdev/mop...

9.8CVSS8.7AI score0.0202EPSS
SaveExploits2References205
NVD
NVD
added 2025/01/23 5:15 p.m.30 views

CVE-2024-12078

ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key...

6.3CVSS0.00327EPSS
SaveExploits1References2
NVD
NVD
added 2025/01/23 4:15 p.m.28 views

CVE-2024-52325

ECOVACS robot lawnmowers and vacuums are vulnerable to command injection via SetNetPin over an unauthenticated BLE connection...

9.6CVSS0.03039EPSS
SaveExploits1References4
Rows per page
Query Builder