Lucene search
+L

9819 matches found

osv_mal
osv_mal
•added 2025/07/30 5:37 p.m.•9 views

MAL-2025-6701 Malicious code in bridge-emulator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_debian
osv_debian
•added 2025/07/30 2:15 p.m.•7 views

DEBIAN-CVE-2025-54410

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

5.2CVSS6.3AI score0.00165EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/07/30 2:15 p.m.•24 views

UBUNTU-CVE-2025-54410

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

5.2CVSS7.2AI score0.00165EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/07/30 1:24 p.m.•14 views

CVE-2025-54410 Moby's Firewalld reload removes bridge network isolation

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

3.3CVSS7.1AI score0.00165EPSS
SaveExploits0References2
Mend
Mend
•added 2025/07/30 1:24 p.m.•17 views

CVE-2025-54410

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

5.2CVSS0.00165EPSS
SaveExploits0References8
Mend
Mend
•added 2025/07/30 1:24 p.m.•6 views

CVE-2025-54388

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including...

5.2CVSS0.00247EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/30 12:00 a.m.•8 views

CVE-2025-54410: Missing Initialization of Resource

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create...

5.2CVSS5.8AI score0.00165EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/07/29 11:23 p.m.•15 views

SUSE CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

5.5CVSS6.5AI score0.00176EPSS
SaveExploits0References12
osv_go
osv_go
•added 2025/07/28 7:57 p.m.•18 views

GO-2025-3781 Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus

Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus...

3.4CVSS6.1AI score0.00254EPSS
SaveExploits0References4
NVD
NVD
•added 2025/07/25 3:15 p.m.•17 views

CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

5.5CVSS0.00176EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/07/25 3:15 p.m.•23 views

UBUNTU-CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

5.5CVSS6AI score0.00176EPSS
SaveExploits0References29
CVE
CVE
•added 2025/07/25 2:16 p.m.•117 views

CVE-2025-38427

Summary: CVE-2025-38427 in the Linux kernel fixes a framebuffer relocation bug where screen_info frames were tied to boot CPU addresses, not accounting for PCI host-bridge offsets. During boot, firmware may assign a different PCI memory offset, relocating PCI graphics framebuffer addresses. The k...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2025/07/25 2:16 p.m.•9 views

CVE-2025-38427

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2025/07/25 2:16 p.m.•14 views

CVE-2025-38427 video: screen_info: Relocate framebuffers behind PCI bridges

In the Linux kernel, the following vulnerability has been resolved: video: screeninfo: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screeninfo framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host bridge can be relocated by a certain...

6.7AI score
SaveExploits0References7
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•11 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the screeninfo module not properly relocating the frame buffer after a PCI bridge, which could lead to inval...

5.5CVSS7AI score0.00176EPSS
SaveExploits0References5
Trend Micro Simply Security
Trend Micro Simply Security
•added 2025/07/24 12:00 a.m.•19 views

Proactive Email Security: The Power of AI

Lead with AI-powered email security to stay ahead of attackers and personalize user interaction at every touchpoint, bridging technology and behavior with precision...

7.4AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2025/07/17 11:38 p.m.•5 views

Malware in canonical-bridge-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_alpine
osv_alpine
•added 2025/07/17 2:15 p.m.•17 views

ALPINE-CVE-2025-1713

When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...

7.5CVSS6.8AI score0.00864EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/07/17 2:15 p.m.•16 views

DEBIAN-CVE-2025-1713

When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...

7.5CVSS6.3AI score0.00864EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/07/15 9:15 a.m.•14 views

Malicious code in ecinc-cloud-moaxmpp (npm)

Package exhibits multiple malicious behaviors: Office doc access/encryption, DB interaction, local storage clearing, arbitrary code execution, /dev/shm ref. The code includes a native bridge that allows it to execute arbitrary SQL queries on a mobile device’s database when used within a specific...

6.4AI score
SaveExploits0References3
Rows per page
Query Builder