Lucene search
+L

580 matches found

Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•9 views

PT-2025-11557

Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.6.38 containerd versions prior to 1.7.27 containerd versions prior to 2.0.4 Description A bug was found in containerd where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed...

7.8CVSS7.3AI score0.00294EPSS
SaveExploits1References76
Amazon
Amazon
•added 2025/03/06 12:00 a.m.•16 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic CVE-2024-42131 In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipcudpaddr2str on error CVE-2024-42284 In the Linu...

8.4CVSS6.5AI score0.00922EPSS
SaveExploits1
OSV
OSV
•added 2025/01/11 1:15 p.m.•7 views

DEBIAN-CVE-2024-49568

In the Linux kernel, the following vulnerability has been resolved: net/smc: check v2extoffset/eidcnt/ismgidcnt when receiving proposal msg When receiving proposal msg in server, the fields v2extoffset/ eidcnt/ismgidcnt in proposal msg are from the remote client and can not be fully trusted...

5.5CVSS5.7AI score0.00528EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/11 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the net/smc module not properly checking the v2extoffset, eidcnt, and ismgidcnt fields when receiving an offer...

5.5CVSS6.6AI score0.00528EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•20 views

PT-2025-2832

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the Linux kernel, specifically the net/smc component. When receiving a proposal message in the server, the fields v2 ext offset, eid cnt, and ism gid cnt in the proposal...

5.5CVSS5.4AI score0.00528EPSS
SaveExploits0
Debian
Debian
•added 2024/12/10 8:19 p.m.•74 views

[SECURITY] [DSA 5827-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5827-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 10, 2024 https://www.debian.org/security/faq -...

6.4AI score0.02158EPSS
SaveExploits0
NVD
NVD
•added 2024/11/29 5:15 a.m.•36 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS0.02158EPSS
SaveExploits0References3
OSV
OSV
•added 2024/11/29 5:15 a.m.•32 views

UBUNTU-CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS5.8AI score0.02158EPSS
SaveExploits0References5
CVE
CVE
•added 2024/11/29 12:00 a.m.•339 views

CVE-2024-48651

The ProFTPD server, specifically versions through 1.3.8b before commit cec01cc , is vulnerable to an issue where supplemental group inheritance grants unintended access to GID 0 . This vulnerability is caused by a lack of supplemental groups from the mod_sql module. Affected systems include Euler...

7AI score0.02158EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2024/11/29 12:00 a.m.•31 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.3AI score0.02158EPSS
SaveExploits0
OSV
OSV
•added 2024/11/29 12:00 a.m.•19 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS6.6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2024/11/29 12:00 a.m.•300 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

0.02158EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•1 views

CVE-2024-48651: Incorrect Authorization

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS7.2AI score0.02158EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/25 10:15 p.m.•3 views

DEBIAN-CVE-2024-53101

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in fromkuid and fromkgid ocfs2setattr uses attr-iamode, attr-iauid and attr-iagid in a trace point even though ATTRMODE, ATTRUID and ATTRGID aren't set. Initialize all fields of newattrs to avoid...

5.5CVSS5.7AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 1:30 a.m.•222 views

CVE-2024-50301

CVE-2024-50301 is a Linux kernel vulnerability: slab-out-of-bounds in key_task_permission within security/keys, leading to a read as observed by KASAN and reported under stress-ng conditions. The issue stems from key management logic in the kernel keys subsystem; multiple advisories (ALAS2, ALAS2...

7.8CVSS6.7AI score0.00283EPSS
SaveExploits0References13Affected Software1
SUSE CVE
SUSE CVE
•added 2024/10/21 3:47 p.m.•10 views

SUSE CVE-2024-47693

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ibcachesetupone error flow cleanup When ibcacheupdate return an error, we exit ibcachesetupone instantly with no proper cleanup, even though before this we had already successfully done gidtablesetupone, that results...

6.2AI score0.00983EPSS
SaveExploits0References18
OSV
OSV
•added 2024/10/21 12:15 p.m.•19 views

AZL-50746 CVE-2024-47693 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ibcachesetupone error flow cleanup When ibcacheupdate return an error, we exit ibcachesetupone instantly with no proper cleanup, even though before this we had already successfully done gidtablesetupone, that results...

6.5CVSS6.5AI score0.00983EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/21 12:15 p.m.•6 views

DEBIAN-CVE-2024-47693

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ibcachesetupone error flow cleanup When ibcacheupdate return an error, we exit ibcachesetupone instantly with no proper cleanup, even though before this we had already successfully done gidtablesetupone, that results...

6.5CVSS5.9AI score0.00983EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/21 12:15 p.m.•12 views

UBUNTU-CVE-2024-47693

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ibcachesetupone error flow cleanup When ibcacheupdate return an error, we exit ibcachesetupone instantly with no proper cleanup, even though before this we had already successfully done gidtablesetupone, that results...

6.5CVSS6.3AI score0.00983EPSS
SaveExploits0References31
Microsoft CVE
Microsoft CVE
•added 2024/10/12 7:00 a.m.•10 views

exec: Fix ToCToU between perm check and set-uid/gid usage

...

8.4CVSS6.8AI score0.00242EPSS
SaveExploits1
Rows per page
Query Builder