Lucene search
+L

142 matches found

Kitploit
Kitploit
•added 2026/10/30 3:03 a.m.•27 views

multi_path

multipath - exploit for p0 issue 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for AFINE...

9.3CVSS7.7AI score0.0796EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2026/10/23 5:25 p.m.•14 views

CVE-2026-98807

A flaw was found in the Linux kernel's Mellanox ConnectX mlx5 network driver. It allows a privileged local user to cause a Denial of Service DoS via an out-of-bounds memory read. When processing Link Aggregation LAG events, the driver incorrectly applies bonding-specific operations to smaller...

4.4CVSS5.8AI score0.00175EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/29 3:17 p.m.•16 views

CVE-2025-33207

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

6.8CVSS0.00152EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 2:12 p.m.•17 views

EUVD-2025-211016

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

6.8CVSS5.9AI score0.00152EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/29 2:12 p.m.•49 views

CVE-2025-33207

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

6.8CVSS0.00152EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/29 2:12 p.m.•16 views

CVE-2025-33207

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

6.8CVSS5.9AI score0.00152EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/29 2:12 p.m.•52 views

CVE-2025-33207

NVIDIA Networking BlueField and ConnectX products are vulnerable to a flaw in a control register (CWE-1262). A user with VF access can send a malicious command to the firmware, resulting in improper access control for the register interface. Successful exploitation may lead to a denial of service...

6.8CVSS5.9AI score0.00152EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•12 views

PT-2026-102617

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

6.8CVSS5.9AI score0.00152EPSS
SaveExploits0References3
Nvidia
Nvidia
•added 2026/09/29 12:00 a.m.•25 views

Security Bulletin: NVIDIA Networking BlueField, ConnectX - September 2026

NVIDIA has released a software update for NVIDIA® Networking BlueField, ConnectX. To protect your system, download and install the latest NVIDIA firmware from the links provided in this bulletin. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities...

5.9AI score0.00152EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•9 views

CVE-2025-33207: Improper Access Control for Register Interface

NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service...

6.8CVSS5.9AI score0.00152EPSS
SaveExploits0References2
Lenovo
Lenovo
•added 2026/08/11 5:28 p.m.•21 views

NVIDIA Networking Bluefield and ConnectX Vulnerabilities - Lenovo Support US

No description provided...

5.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2026/07/22 2:18 p.m.•84 views

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability in NVIDIA Network Adapters [CVE-2025-23299]

Summary IBM i uses NVIDIA network adapter cards for communication over ethernet. NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that may allow a malicious actor with high privilege access to execute arbitrary code CVE-2025-23299 as described in the vulnerability...

6.7CVSS6.9AI score0.00179EPSS
SaveExploits0Affected Software5
NVD
NVD
•added 2026/07/01 4:16 p.m.•41 views

CVE-2025-23350

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS0.00367EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/01 4:16 p.m.•35 views

CVE-2025-23351

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS0.00367EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/01 2:39 p.m.•62 views

CVE-2025-23351

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS0.00367EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/01 2:39 p.m.•15 views

CVE-2025-23351

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS6.4AI score0.00367EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/01 2:39 p.m.•27 views

EUVD-2025-210397

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS6.4AI score0.00367EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/01 2:39 p.m.•19 views

CVE-2025-23351

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS6.4AI score0.00367EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/01 2:39 p.m.•95 views

CVE-2025-23351

NVIDIA advisory for CVE-2025-23351: A vulnerability in the command interface on NVIDIA Networking BlueField and ConnectX allows a local user with VF access to cause an out-of-bounds write, enabling potential arbitrary code execution on the device. Affected products include BlueField GA (BlueField...

9CVSS6.4AI score0.00367EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/01 2:36 p.m.•17 views

CVE-2025-23350

NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user with virtual function VF access may cause a write out of bounds by crafted input. A successful exploit of this vulnerability may lead to arbitrary code execution on the device...

9CVSS6.4AI score0.00367EPSS
SaveExploits0References3
Rows per page
Query Builder