Lucene search
+L

16780 matches found

attackerkb
attackerkb
•added 2025/08/08 6:14 p.m.•13 views

CVE-2012-10048

Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on the server as the zenoss user...

8.7CVSS6.1AI score0.03716EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/08 7:31 a.m.•36 views

CVE-2025-27067

Memory corruption while processing DDI call with invalid buffer...

7.8CVSS6.8AI score0.00089EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/08 1:24 a.m.•17 views

CVE-2025-8650

Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

6.8CVSS7.1AI score0.00668EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2021-47553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that C...

7.8CVSS5.9AI score0.0026EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-48928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: menz188adc: Fix a resource leak in an error handling path If iiodeviceregister fails, a previous ioremap is left unbalanced. Update the error handling...

5.5CVSS5.5AI score0.0021EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2022-50102

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - video: fbdev: arkfb: Fix a divide-by-zero bug in arksetpixclock Since the user can control the arguments of the ioctl from the user space, under special...

5.5CVSS6AI score0.00194EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-35903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: x86/bpf: Fix IP after emitting call depth accounting Ubuntu Linux - In the Linux kernel, the following vulnerability has been...

5.5CVSS5.9AI score0.00211EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-21846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a...

5.5CVSS6.9AI score0.00252EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-37926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free in ksmbdsessionrpcopen A UAF issue can occur due to a race condition between ksmbdsessionrpcopen and sessionrpcclose. Add rpclock to t...

8.8CVSS6.6AI score0.0057EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2023-2006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper...

7CVSS6.9AI score0.00363EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/08/06 1:43 p.m.•10 views

Double Free

Overview nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments. Affected versions of this package are vulnerable to Double Free via the cancellation handling for gRPC non-decoupled inference. An attacker can cause a double free by...

8.7CVSS7AI score0.00579EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/06 8:15 a.m.•21 views

CVE-2025-27067

Memory corruption while processing DDI call with invalid buffer...

7.8CVSS0.00089EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/08/06 2:15 a.m.•22 views

CVE-2025-8654

Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fla...

8.8CVSS6.3AI score0.00763EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/08/06 2:15 a.m.•20 views

CVE-2025-8644

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score0.009EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/08/06 2:15 a.m.•22 views

CVE-2025-8635

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score0.00929EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/06 1:19 a.m.•25 views

CVE-2025-8655 Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability

Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

6.8CVSS0.00668EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/06 1:17 a.m.•40 views

CVE-2025-8640

The CVE-2025-8640 entry describes a command-injection vulnerability in Kenwood DMX958XR firmware update handling. The flaw arises from insufficient validation of a user-supplied string used to construct a system call, enabling a physically present attacker to run code as root without authenticati...

6.8CVSS7AI score0.00929EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/08/06 1:17 a.m.•42 views

CVE-2025-8636

The CVE-2025-8636 entry concerns Kenwood DMX958XR firmware update command injection. Concrete details in the connected documents show the flaw resides in the firmware update process where a user-supplied string is not properly validated before being used to execute a system call, allowing an atta...

6.8CVSS7AI score0.00948EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•7 views

CVE-2025-27067: Improper Validation of Array Index

Memory corruption while processing DDI call with invalid buffer...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/06 12:00 a.m.•26 views

PT-2025-46632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to the i10nm edac driver on some Intel Granite Rapids servers. A call trace may appear due to a shift-out-of-bounds error in drivers/edac/skx...

4.6CVSS6.5AI score0.00246EPSS
SaveExploits0
Rows per page
Query Builder