Lucene search
+L

8906 matches found

osv_alsa
osv_alsa
•added 2025/05/19 12:00 a.m.•42 views

ALSA-2025:7903 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock: Keep the binding until socket destruction CVE-2025-21756 kernel: dm-flakey: Fix memory corruption in optional corruptbiobyte feature CVE-2025-21966 kernel: net: ppp: Add bound...

8.2CVSS6.8AI score0.00891EPSS
SaveExploits3References8
RedhatCVE
RedhatCVE
•added 2025/05/18 3:02 p.m.•18 views

CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud...

6.5CVSS5.4AI score0.00821EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/16 3:15 p.m.•23 views

CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud...

6.5CVSS0.00821EPSS
SaveExploits0References4
Mend
Mend
•added 2025/05/16 2:31 p.m.•13 views

CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud...

6.5CVSS5.3AI score0.00821EPSS
SaveExploits0References6
osv_oesa
osv_oesa
•added 2025/05/16 11:08 a.m.•26 views

OESA-2025-1511 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix a flaw in existing endpoint checks Syzbot once again identified a flaw in usb endpoint checking, see 1. This time the issue stems from a...

5.5CVSS5.5AI score0.00369EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•25 views

PT-2025-21661

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 30.0.2 Nextcloud Server versions prior to 29.0.9 Nextcloud Server versions prior to 28.0.1 Nextcloud Enterprise Server versions prior to 30.0.2 Nextcloud Enterprise Server versions prior to 29.0.9 Nextcloud...

6.5CVSS5.4AI score0.00821EPSS
SaveExploits0References16
osv_go
osv_go
•added 2025/05/15 8:00 p.m.•24 views

GO-2025-3678 Ring: some aes functions may panic when overflow checking is enabled in ring in github.com/briansmith/ring

Ring: some aes functions may panic when overflow checking is enabled in ring in github.com/briansmith/ring...

5.3CVSS7.2AI score0.01029EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2025/05/14 10:59 p.m.•26 views

CVE-2025-46836 net-tools Stack-based Buffer Overflow vulnerability

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

6.6CVSS7.2AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2025/05/14 10:27 p.m.•14 views

CVE-2025-31209

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to disclosure of user information...

6.3CVSS5.8AI score0.00875EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/14 6:12 a.m.•40 views

CVE-2025-3649

The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contributor role to conduct Stored XSS attacks...

6.8CVSS8.5AI score0.00455EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/14 12:00 a.m.•26 views

Palo Alto Networks PAN-OS code-related vulnerabilities

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from a lack of anomaly checking could lead to a denial of service attack...

8.2CVSS7.2AI score0.00442EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/14 12:00 a.m.•20 views

Samsung Exynos security vulnerabilities

SAMSUNG Exynos is a series of SoC, Arm architecture-based processors developed and manufactured by Samsung Mobile, a South Korean company. A security vulnerability exists in SAMSUNG Exynos that stems from a lack of length checking leading to out-of-bounds access...

6.5CVSS5.9AI score0.00269EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•17 views

kernel: filemap: Fix bounds checking in filemap_read()

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS due to improper bounds checking in the file mapping subsystem. When a read operation is initiated with a file position near the upper limit of the file system and a read length that overflows that boundary, the...

5.5CVSS6.5AI score0.00272EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•16 views

kernel: octeontx2-af: Add validation before accessing cgx and lmac

A bounds-checking error was found in the Linux kernel Marvell OcteonTX2 network driver's initialization code. On systems with newer CN10K RPM or CN10KB RPMUSX hardware, a local user with privileges to initialize the driver can trigger driver probe, causing the driver to make incorrect assumptions...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•11 views

CVE-2025-20004: Insufficient Control Flow Management

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

8.5CVSS6AI score0.00155EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/13 12:00 a.m.•24 views

WordPress Plugin Frontend Dashboard Authorization Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

8.8CVSS8.2AI score0.00474EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/05/13 12:00 a.m.•22 views

Intel Arc code-related vulnerabilities

Intel Arc is a family of graphics cards from Intel Corporation USA. A code issue vulnerability exists in Intel Arc that stems from improper checking of certain conditions and could lead to a local denial of service attack...

5.7CVSS5.9AI score0.00145EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/05/13 12:00 a.m.•20 views

Intel Tiber Edge Platform Edge Orchestrator code-related vulnerabilities

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation Intel. A code issue vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from improper condition checking and could lead to a denial...

5.1CVSS5.8AI score0.00228EPSS
SaveExploits0References2
Redos
Redos
•added 2025/05/13 12:00 a.m.•31 views

ROS-2-678

2.678 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

5.5CVSS6.3AI score0.0263EPSS
SaveExploits0
NVD
NVD
•added 2025/05/12 10:15 p.m.•17 views

CVE-2025-31209

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to disclosure of user information...

6.3CVSS0.00875EPSS
SaveExploits0References14
Rows per page
Query Builder