Lucene search
+L

2200 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/01 12:00 a.m.•3 views

CVE-2023-53490: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b "mptcp: fix possible divide by zero in recvmsg", the mptcp protocol is still prone to a race between disconnect or shutdown and accept. The root cause is that the...

7.8CVSS5.6AI score0.00117EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/09/25 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-59692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT...

3.7CVSS5.9AI score0.00207EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/09/24 11:22 p.m.•19 views

SUSE CVE-2025-39801

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARNON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'paniconwarn' is enabled and unnecessary call trace prints...

6.7AI score0.00153EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
•added 2025/09/20 12:30 a.m.•25 views

CVE-2025-59692

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software e.g., UFW,...

3.7CVSS6.9AI score0.00207EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/20 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2023-53358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurren...

8.8CVSS6.2AI score0.00382EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/19 5:21 a.m.•59 views

CVE-2025-10456

CVE-2025-10456 concerns BLE fixed-channel handling (SMP/ATT) in Zephyr RTOS. The root issue: a device may be tricked into sending a disconnection request for a fixed channel, which is disallowed by the Bluetooth spec, triggering undefined behavior such as assertion failures, crashes, or memory co...

7.1CVSS5.7AI score0.00209EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/19 12:00 a.m.•31 views

PT-2025-38514

Name of the Vulnerable Software and Affected Versions Bluetooth Low Energy BLE affected versions not specified Description A flaw exists in the handling of Bluetooth Low Energy BLE fixed channels, such as SMP or ATT. An attacker can exploit this issue, causing the BLE target device to attempt to...

7.1CVSS6.4AI score0.00209EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/09/18 11:38 p.m.•18 views

SUSE CVE-2023-53356

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Add null pointer check in gserialsuspend Consider a case where gserialdisconnect has already cleared gser-ioport. And if gserialsuspend gets called afterwards, it will lead to accessing of gser-ioport and th...

5.5CVSS6.4AI score0.0019EPSS
SaveExploits0References19
NVD
NVD
•added 2025/09/18 11:15 p.m.•18 views

CVE-2025-59692

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software e.g., UFW,...

3.7CVSS0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/18 12:00 a.m.•32 views

CVE-2025-59692

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software e.g., UFW,...

3.7CVSS0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/18 12:00 a.m.•21 views

PT-2025-38497

Name of the Vulnerable Software and Affected Versions PureVPN versions 2.0.1 and 2.10.0 Description PureVPN client applications on Linux mishandle firewalling. The applications flush existing iptables rules and apply default ACCEPT policies when connecting to a VPN server, removing previously...

3.7CVSS6.6AI score0.00207EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
•added 2025/09/18 12:00 a.m.•6 views

CVE-2025-59692

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software e.g., UFW,...

3.7CVSS6.5AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/18 12:00 a.m.•61 views

CVE-2025-59692

The CVE-2025-59692 issue affects PureVPN CLI 2.0.1 and GUI 2.10.0 on Linux. The root cause is that the VPN client mishandles firewalling by flushing existing iptables rules and applying default ACCEPT policies when connecting to a VPN server, thereby removing manually configured rules and rules f...

3.7CVSS6.5AI score0.00207EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/09/17 11:27 p.m.•13 views

SUSE CVE-2023-53358

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access...

8.8CVSS6.5AI score0.00382EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/09/17 6:13 p.m.•10 views

CVE-2023-53356

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Add null pointer check in gserialsuspend Consider a case where gserialdisconnect has already cleared gser-ioport. And if gserialsuspend gets called afterwards, it will lead to accessing of gser-ioport and th...

5.5CVSS5.7AI score0.0019EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/09/17 5:15 p.m.•15 views

CVE-2023-53358

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access...

5.5CVSS5.8AI score0.00382EPSS
SaveExploits0References4
NVD
NVD
•added 2025/09/17 3:15 p.m.•22 views

CVE-2023-53358

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access...

8.8CVSS0.00382EPSS
SaveExploits0References5
OSV
OSV
•added 2025/09/17 3:15 p.m.•15 views

DEBIAN-CVE-2023-53358

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access...

7CVSS6.1AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/17 3:15 p.m.•17 views

UBUNTU-CVE-2023-53358

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access...

8.8CVSS6.6AI score0.00382EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/09/17 2:56 p.m.•12 views

CVE-2023-53358 ksmbd: fix racy issue under cocurrent smb2 tree disconnect

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue under cocurrent smb2 tree disconnect There is UAF issue under cocurrent smb2 tree disconnect. This patch introduce TREECONNEXPIRE flags for tcon to avoid cocurrent access...

5.8AI score0.00382EPSS
SaveExploits0References5
Rows per page
Query Builder