Lucene search
+L

3898 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2025-21862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dropmonitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock bad magic on CPU1, syz-executor.0/7995 lock:...

5.5CVSS6.7AI score0.00235EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2023-25741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When dragging and dropping an image cross-origin, the image's size could potentially be leaked. This behavior was shipped in 109 and caused web compatibility...

6.5CVSS6.8AI score0.00767EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/10 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2019-11698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped into the web content...

5.3CVSS6.9AI score0.01354EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2024-27405

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when tethering is used over NCM with Windows 11 as host, at some...

6.5AI score0.01298EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2024-36015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in registerdevice In registerdevice, the return value of...

7.8CVSS5.7AI score0.00253EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2022-42329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

5.5CVSS6.4AI score0.00222EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2025/08/08 8:04 a.m.•10 views

Security update for nginx

This update for nginx fixes the following issues: Security hardening: - Drop root priviledges while running logrotatei. bsc1246090 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

7.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/08 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-37959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Scrub packet on bpfredirectpeer When bpfredirectpeer is used to redirect packets to a device in another network namespace, the skb isn't scrubbed. That can...

9.4CVSS6.5AI score0.00362EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2025/08/07 7:00 a.m.•8 views

wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

...

8.3CVSS7AI score0.0022EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-21903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mctp i3c: handle NULL header address daddr can be NULL if there is no neighbour table entry...

5.5CVSS5.6AI score0.00199EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/06 6:32 p.m.•25 views

CVE-2025-8520

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to server-side request forgery. The attack can be...

5.8CVSS4.9AI score0.00352EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/06 5:32 p.m.•27 views

CVE-2025-8519

A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to information disclosure. It is possible to...

5.1CVSS3.4AI score0.00399EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/06 3:15 a.m.•11 views

CVE-2025-54636

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS6AI score0.00088EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/06 3:15 a.m.•14 views

CVE-2025-54636

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS0.00088EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/06 2:32 a.m.•37 views

CVE-2025-54636

CVE-2025-54636 is a buffer overflow in Huawei kernel drop detection due to insufficient data verification. Connected documents identify Huawei HarmonyOS and EMUI as affected (kernel drop detection module) with availability impact; root cause is data-validation failure leading to overflow. Exploit...

5.5CVSS6.9AI score0.00088EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•2 views

CVE-2025-54636: Improper Input Validation

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS6.1AI score0.00088EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2025/08/05 3:04 p.m.•11 views

Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002347 fixes several issues. The following security issues were fixed: CVE-2025-37797: netsched: hfsc: Fix a UAF vulnerability in class handling bsc1245793. CVE-2025-37752: netsched: schsfq: move the limit validation bsc1245776. CVE-2025-21702:...

7.8CVSS8.1AI score0.00303EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2025/08/05 10:04 a.m.•12 views

Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059207 fixes several issues. The following security issues were fixed: CVE-2025-37797: netsched: hfsc: Fix a UAF vulnerability in class handling bsc1245793. CVE-2025-37752: netsched: schsfq: move the limit validation bsc1245776. CVE-2025-21702:...

7.8CVSS8.1AI score0.00303EPSS
SaveExploits0References12
NVD
NVD
•added 2025/08/04 6:15 p.m.•21 views

CVE-2025-8519

A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to information disclosure. It is possible to...

5.1CVSS0.00399EPSS
SaveExploits1References6
CVE
CVE
•added 2025/08/04 6:02 p.m.•45 views

CVE-2025-8520

CVE-2025-8520 affects givanz Vvveb up to version 1.0.5, specifically the Drag-and-Drop Editor’s /vadmin123/?module=editor/editor endpoint. The issue is a server-side request forgery triggered by manipulating the url argument, enabling remote initiation. Public exploitation has been disclosed. A f...

5.8CVSS5.1AI score0.00352EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder