Lucene search
+L

8907 matches found

Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•19 views

PT-2025-20574

Name of the Vulnerable Software and Affected Versions Rust's Ring package affected versions not specified Debian Linux affected versions not specified Description A flaw in Rust's Ring package can trigger a panic when overflow checking is enabled. This issue can be exploited in the QUIC protocol ...

8.7CVSS7AI score0.01029EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•17 views

PT-2025-30833

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ims pcu flash firmware function does not adequately validate the size of data received from firmware before copying it into memory using memcpy. The len variable, originating from th...

7.8CVSS6.5AI score0.00219EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•18 views

PT-2025-36411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the NFS functionality of the Linux kernel related to insufficient bounds checking within the nfs fh to dentry function. This function requires verification of the minima...

8.2CVSS6.4AI score0.00198EPSS
SaveExploits0
osv_debian
osv_debian
•added 2024/12/29 12:15 p.m.•8 views

DEBIAN-CVE-2024-56725

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2dcbnl.c Add error pointer check after calling otx2mboxgetrsp...

5.5CVSS6.1AI score0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/28 4:18 p.m.•20 views

CVE-2024-56512 Apache NiFi: Missing Complete Authorization for Parameter and Service References

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

2.1CVSS5.9AI score0.03241EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2024/12/28 3:50 a.m.•13 views

SUSE CVE-2024-53189

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix bounds checker error in nl80211parseschedscan The channels array in the cfg80211scanrequest has a countedby attribute attached to it, which points to the nchannels variable. This attribute is used in bounds...

6.2AI score0.0023EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/28 12:00 a.m.•22 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from insufficient integrity checking of node block addresses in the truncatenode function in the f2fs module...

5.5CVSS6.6AI score0.00215EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2024/12/27 2:15 p.m.•14 views

DEBIAN-CVE-2024-53189

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix bounds checker error in nl80211parseschedscan The channels array in the cfg80211scanrequest has a countedby attribute attached to it, which points to the nchannels variable. This attribute is used in bounds...

5.5CVSS6.4AI score0.0023EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/27 2:15 p.m.•20 views

UBUNTU-CVE-2024-53189

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix bounds checker error in nl80211parseschedscan The channels array in the cfg80211scanrequest has a countedby attribute attached to it, which points to the nchannels variable. This attribute is used in bounds...

5.5CVSS6.4AI score0.0023EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•21 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a strict alignment checking issue in the createcache function in the slab subsystem...

5.5CVSS6.4AI score0.00189EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•21 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from insufficient null pointer checking in the default mmap error handler in the ALSA:pcm module...

5.5CVSS6.4AI score0.00238EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•19 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from improper LED ID checking in the ledtgcheck function in the netfilter:xtables module...

7.1CVSS6.7AI score0.0027EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•24 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from insufficient overflow checking of the iopinpages function in the iouring module...

5.5CVSS6.6AI score0.00235EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/12/18 12:00 a.m.•23 views

AMD Platform Security Processor Loader Code Execution

The vulnerability of the loader for AMD Platform Security Processor processors involves incorrect checking of the range in the object header. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00295EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/13 10:21 a.m.•21 views

CVE-2024-52064 Potential stack buffer write overflow in Connext applications while parsing malicious license file

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in RTI Connext Professional Core Libraries allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0...

6.9CVSS5.8AI score0.00155EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•8 views

PT-2024-35114

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 5.0.0 through 5.3.1.45 RTI Connext Professional versions 6.0.0 through 6.0.1.40 RTI Connext Professional versions 6.1.0 through 6.1.2.21 RTI Connext Professional versions 7.0.0 through 7.3.0.5 Description The...

8.6CVSS5.8AI score0.00339EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•11 views

PT-2024-35115

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.0.0 through 7.3.0.2 RTI Connext Professional versions 6.1.0 through 6.1.2.21 RTI Connext Professional versions 6.0.0 through 6.0.1.40 RTI Connext Professional versions 5.0.0 through 5.3.1.45 Description The...

7.1CVSS5.8AI score0.00155EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2024/12/13 12:00 a.m.•17 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50244)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50244 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in niclear...

5.5CVSS6.4AI score0.00219EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/12/12 2:15 a.m.•21 views

CVE-2024-54506

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...

9.8CVSS7.8AI score0.00695EPSS
SaveExploits0References2
osv_clsa
osv_clsa
•added 2024/12/06 2:31 p.m.•29 views

CLSA-2024-1733483766 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

8.8CVSS7.2AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder