Lucene search
+L

14964 matches found

Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•24 views

PT-2025-53148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to ext4 quota handling. Specifically, a bug in the es tree search function can occur due to a bad quota inode. This issue arises when the inode...

6.1AI score0.00226EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•11 views

CVE-2025-12626: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects the function getImgUrl of the file WxActGoldeneggsPrizesController.java. Performing manipulation of the argument imgurl results in path traversal. Remote exploitation of the...

5.3CVSS4.9AI score0.00451EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•7 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Added resctrlcpudetect to the bspinit helper. Since 923f3a2b48bd “x86/resctrl: Query LLC monitoring properties once during boot”, resctrlcpudetect has been moved from the common CPU initialization code to the...

5.5CVSS6.1AI score0.00176EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•13 views

Astra Linux – Vulnerability in grub2

GRUB2 does not call the fini functions upon exit, resulting in the Debian/Ubuntu’s peimage GRUB2 module leaving hooks in the UEFI system table after exit. This leads to a use-after-free condition and may potentially allow for bypasses in secure boot...

6.7CVSS6.9AI score0.00378EPSS
SaveExploits1References3
AstraLinux
AstraLinux
•added 2025/10/31 4:38 p.m.•15 views

Astra Linux - уязвимость в u-boot

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem...

7.8CVSS7.2AI score0.01256EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•24 views

U-Boot memcpy Heap Buffer Overflow DoS

The vulnerability of the memcpy function in the U-Boot loader is related to a numerical loss of significance. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure through a specially created ext4 file...

7.8CVSS8AI score0.01118EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•22 views

U-Boot nfs_readreply Heap Buffer Overflow DoS

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS8.1AI score0.02514EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•23 views

i2c md Command Data Compromise

The vulnerability of the “i2c md” command in the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS8.8AI score0.023EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•21 views

U-Boot loader Uncontrolled Recursion

The vulnerability of the U-Boot loader is related to uncontrolled recursion. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

7.1CVSS7.4AI score0.0043EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•29 views

U-Boot memset Heap Buffer Overflow DoS

The vulnerability of the memset function in the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures through a specially created ext4 file...

8.3CVSS7.6AI score0.01764EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•22 views

U-Boot net/nfs.c Heap Buffer Overflow DoS

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

9.1CVSS7.7AI score0.02533EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•22 views

U-Boot loader Information Disclosure

The vulnerability of the U-Boot loader is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS8.3AI score0.01401EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•24 views

U-Boot driver/usb/gadget/f_dfu.c DFU Disclosure

The vulnerability in the driver/usb/gadget/fdfu.c file of the U-Boot loader is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause system failures...

7.7CVSS8.3AI score0.00577EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•24 views

U-Boot Heap Buffer Overflow DoS

The vulnerability of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS8.1AI score0.0257EPSS
SaveExploits0References8Affected Software3
VulnCheck KEV
VulnCheck KEV
•added 2025/10/31 12:00 a.m.•65 views

VulnCheck KEV: CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...

7.5CVSS7.3AI score0.0352EPSS
SaveIn wildExploits1References25
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•20 views

U-Boot loader nfs_readlink_reply Heap Buffer Overflow DoS

The vulnerability of the nfsreadlinkreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS8.1AI score0.02617EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•26 views

U-Boot net/nfs.c Heap Buffer Overflow DoS

The vulnerability of the nfslookupreply function in the net/nfs.c component of the U-Boot loader is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS8.7AI score0.02662EPSS
SaveExploits0References8Affected Software3
CNNVD
CNNVD
•added 2025/10/29 4:00 p.m.•18 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing BOs to be evicted in the same VM, potentially leading to null pointer dereferencing...

5.7AI score0.00227EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/28 6:30 p.m.•20 views

EUVD-2025-36548

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request...

5.7AI score0.00322EPSS
SaveExploits2References2
Mend
Mend
•added 2025/10/28 12:00 a.m.•7 views

CVE-2025-60800

Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request...

8.7CVSS5.7AI score0.00322EPSS
SaveExploits2References1
Rows per page
Query Builder