Lucene search
K

9048 matches found

Vulnrichment
Vulnrichment
added 2026/02/10 7:13 p.m.5 views

CVE-2025-48509

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity...

1.8CVSS5.5AI score0.00115EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 7:13 p.m.10 views

CVE-2025-48509

CVE-2025-48509 describes Missing Checks in functions related to Reverse Map Table (RMP) initialization that can let a local admin attacker misidentify I/O memory, potentially affecting guest memory integrity. The primary technical details indicate this affects AMD EPYC/SNP environments and relate...

1.8CVSS5.5AI score0.00115EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 7:13 p.m.30 views

CVE-2025-48509

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity...

1.8CVSS0.00115EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 7:11 p.m.4 views

CVE-2025-29939

Improper access control in secure encrypted virtualization SEV could allow a privileged attacker to write to the reverse map page RMP during secure nested paging SNP initialization, potentially resulting in a loss of guest memory confidentiality and integrity...

6.9CVSS5.5AI score0.00136EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 7:9 p.m.5 views

CVE-2025-29952

Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity...

5.9CVSS5.5AI score0.00143EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 7:9 p.m.30 views

CVE-2025-29952

Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity...

5.9CVSS0.00143EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 4:25 p.m.4 views

CVE-2025-25058

Improper initialization for some ESXi kernel mode driver for the IntelR Ethernet 800-Series before version 2.2.2.0 esxi 8.0 & 2.2.3.0 esxi 9.0 within Ring 1: Device Drivers may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a low complexi...

3.3CVSS5.3AI score0.00108EPSS
Exploits0References1
OSV
OSV
added 2026/02/10 3:26 p.m.6 views

USN-8022-1 expat vulnerabilities

It was discovered that Expat incorrectly handled memory when parsing certain XML files. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 25.10. CVE-2025-59375 It was discovered that Expat incorrectly handled the initialization of...

7.8CVSS6.6AI score0.01279EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/10 2:45 p.m.8 views

Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to Solr Core

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2024-45217...

9.8CVSS6.7AI score0.90709EPSS
Exploits1Affected Software1
RedHat Linux
RedHat Linux
added 2026/02/10 2:6 a.m.8 views

kernel: Kernel: Privilege escalation via uninitialized data in vmci transport packet

A flaw was found in the Linux kernel's vsock/vmci component. A local attacker with low privileges could exploit a vulnerability where the vmcitransportpacket structure is not properly cleared during initialization. This can lead to the use of uninitialized data, potentially allowing for informati...

7.8CVSS5.8AI score0.0018EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.5 views

PT-2026-7451

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity...

1.8CVSS5.5AI score0.00115EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.7 views

PT-2026-7289

Name of the Vulnerable Software and Affected Versions VMware ESXi versions prior to 2.2.2.0 ESXi 8.0 VMware ESXi versions prior to 2.2.3.0 ESXi 9.0 Description An improper initialization issue exists in some ESXi kernel mode driver for the Intel Ethernet 800-Series. This may allow an information...

3.3CVSS5.3AI score0.00108EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.5 views

Intel Ethernet 800-Series 安全漏洞

Intel Ethernet 800-Series is a series of network adapters developed by the American company Intel. Versions 2.2.2.0 esxi 8.0 and 2.2.3.0 esxi 9.0 of Intel Ethernet 800-Series contained security vulnerabilities due to improper initialization, which could lead to information leakage...

3.3CVSS5.8AI score0.00108EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

AMD多款产品 安全漏洞

AMD EPYC and others are products of American semiconductor company AMD. AMD EPYC is a high-performance server processor. Amd Epyc™ Embedded Processors are embedded processors. AMD EPYC Processors are a series of multi-core processors. Several AMD products have security vulnerabilities; these...

1.8CVSS5.8AI score0.00115EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.5 views

AMD Amd Epyc™ Embedded Processors和AMD EPYC 9005 Series 安全漏洞

AMD Amd Epyc™ Embedded Processors and AMD EPYC 9005 Series are products of American semiconductor company AMD. The Amd Epyc™ Embedded Processors are embedded processors. The AMD EPYC 9005 Series is a series of processors. Both the AMD Amd Epyc™ Embedded Processors and the AMD EPYC 9005 Series hav...

5.9CVSS5.8AI score0.00143EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.6 views

AlmaLinux 8 : kernel-rt (ALSA-2026:2378)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2378 advisory. kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it CVE-2025-38403 kernel: net: use dstdevrcu in sksetupcaps CVE-2025-40170...

7.8CVSS7.9AI score0.0071EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2026/02/09 2:40 a.m.1 views

kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability

A flaw was found in the Linux kernel's irqchip/gic-v2m component. This vulnerability allows a use-after-free condition via gicv2mgetfwnode being wrongly marked as init, causing it to be freed while still registered with the PCI Peripheral Component Interconnect subsystem during a PCI host bridge...

7.8CVSS5.7AI score0.00167EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/02/08 1:21 a.m.7 views

CVE-2026-25803

3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials admin/admin upon the first initialization. Attackers with network access to the application's login interface can gain full...

9.8CVSS5.4AI score0.00364EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/02/07 7:31 p.m.5 views

CVE-2026-23740

A flaw was found in Asterisk. When the astcoredumper writes its gdb init and output files to a world-writable directory, a local attacker with write permissions to that directory can exploit this vulnerability. By manipulating the gdb init file and output paths, the attacker can cause the system ...

7.8CVSS5.9AI score0.00112EPSS
Exploits0References4
NVD
NVD
added 2026/02/06 11:15 p.m.10 views

CVE-2026-25803

3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials admin/admin upon the first initialization. Attackers with network access to the application's login interface can gain full...

9.8CVSS0.00364EPSS
Exploits0References2
Rows per page
Query Builder