Lucene search
+L

19345 matches found

osv_debian
osv_debian
•added 2025/02/26 7:00 a.m.•10 views

DEBIAN-CVE-2022-49196

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix use after free in removephbdynamic In removephbdynamic we use &phb-ioresource, after we've called deviceunregister&hostbridge-dev. But the unregister may have freed phb, because pcibiosfreecontrollerdeferred ...

7.8CVSS5.4AI score0.00275EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/02/26 7:00 a.m.•28 views

DEBIAN-CVE-2022-49199

In the Linux kernel, the following vulnerability has been resolved: RDMA/nldev: Prevent underflow in nldevstatsetcounterdynamicdoit This code checks "index" for an upper bound but it does not check for negatives. Change the type to unsigned to prevent underflows...

5.5CVSS5.4AI score0.00265EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/26 2:24 a.m.•17 views

CVE-2022-49688 afs: Fix dynamic root getattr

In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't account for the pseudo-inodes employed by the dynamic root-type afs superblock not having a volume or a server to access, and thus an oop...

5AI score0.00298EPSS
SaveExploits0References9
CVE
CVE
•added 2025/02/26 2:24 a.m.•183 views

CVE-2022-49688

The CVE-2022-49688 entry concerns the Linux kernel afs subsystem. A patch fix for afs_getattr prevents dereferencing vnode->volume when the dynamic root afs superblock has pseudo-inodes without a volume or server, which previously could trigger a NULL pointer dereference when stat’ing a direct...

5.5CVSS5.2AI score0.00298EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2025/02/26 2:24 a.m.•27 views

CVE-2022-49688 afs: Fix dynamic root getattr

In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't account for the pseudo-inodes employed by the dynamic root-type afs superblock not having a volume or a server to access, and thus an oop...

0.00298EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2025/02/26 2:24 a.m.•21 views

CVE-2022-49688

In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't account for the pseudo-inodes employed by the dynamic root-type afs superblock not having a volume or a server to access, and thus an oop...

5.5CVSS5.3AI score0.00298EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/02/26 2:13 a.m.•5 views

CVE-2022-49484 mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix possible NULL pointer dereference in mt7915macfillrxvector Fix possible NULL pointer dereference in mt7915macfillrxvector routine if the chip does not support dbdc and the hw reports bandidx set to 1...

6.4AI score0.00224EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/26 1:55 a.m.•32 views

CVE-2022-49196

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix use after free in removephbdynamic In removephbdynamic we use &phb-ioresource, after we've called deviceunregister&hostbridge-dev. But the unregister may have freed phb, because pcibiosfreecontrollerdeferred ...

7.8CVSS5.4AI score0.00275EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•22 views

Windows Telephony Service Code Execution

The vulnerability of the Windows Operating System’s Telephony Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.5AI score0.01812EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•20 views

Windows Telephony Service Code Execution

The vulnerability of the Windows Operating System’s Telephony Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.5AI score0.02433EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•20 views

Windows Telephony Service Code Execution

The vulnerability of the Windows Operating System’s Telephony Service is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.5AI score0.01818EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•22 views

OpenH264 Decoding Arbitrary Code

The vulnerability of the decoding functions of the OpenH264 library is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted video file...

10CVSS8AI score0.00687EPSS
SaveExploits0References13Affected Software7
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•31 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the removephbdynamic function...

7.8CVSS5.9AI score0.00275EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•22 views

Microsoft Digest Authentication Code Execution

The vulnerability of the Microsoft Digest Authentication wDigest authentication mechanism in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

9CVSS8.5AI score0.02151EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•20 views

Core Messaging Privilege Escalation

The vulnerability of the Core Messaging component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS8AI score0.00607EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•14 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer dereference in afsgetattr when handling dynamic root directories...

5.5CVSS5.3AI score0.00298EPSS
SaveExploits0References8
Wolfi
Wolfi
•added 2025/02/25 3:16 p.m.•148 views

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: argo-workflows, hello-world-golang, controller-gen, pulumi, flux-helm-controller, grpcurl, yq, cri-tools, nats, cni-plugins, http-echo, dockerize, secrets-store-csi-driver-provider-azure, up, cert-exporter, doppler-kubernetes-operator, dynamic-localpv-provisioner,...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2025/02/25 11:30 a.m.•37 views

Moderate: Red Hat Security Advisory: python3.11-urllib3 security update

An update for python3.11-urllib3 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

4.2CVSS6.7AI score0.00593EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/24 7:15 p.m.•30 views

CVE-2025-27364

In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution RCE vulnerability was found in the dynamic agent implant compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web...

10CVSS0.2591EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2025/02/24 12:00 a.m.•325 views

CVE-2025-27364

In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution RCE vulnerability was found in the dynamic agent implant compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web...

10CVSS0.2591EPSS
SaveExploits2References6
Rows per page
Query Builder