Lucene search
+L

2269 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001810 advisory. The udpv6pushpendingframes function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data...

4.7CVSS6.1AI score0.0042EPSS
SaveExploits0References25
RedHat Linux
RedHat Linux
added 2026/01/14 9:53 a.m.6 views

kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv()

An out of bounds OOB memory access flaw was found in the Linux kernel's ipv6 network subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

8.2CVSS7.2AI score0.00526EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/14 12:10 a.m.5 views

kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv()

An out of bounds OOB memory access flaw was found in the Linux kernel's ipv6 network subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

8.2CVSS7.2AI score0.00526EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.6 views

MiracleLinux 4 : openswan-2.6.32-4.2.0.1.AXS4 (AXSA:2011-553:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-553:01 advisory. Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authenticatio...

5CVSS5.6AI score0.02273EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000718 advisory. The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6...

4.9CVSS5.3AI score0.00556EPSS
SaveExploits1References23
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.6 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001731 advisory. A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously...

7CVSS6.5AI score0.00206EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/13 6:43 p.m.9 views

CVE-2025-68949 n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching

n8n is an open source workflow automation platform. From 1.36.0 to before 2.2.0, the Webhook node’s IP whitelist validation performed partial string matching instead of exact IP comparison. As a result, an incoming request could be accepted if the source IP address merely contained the configured...

5.3CVSS6.4AI score
SaveExploits0References6
OSV
OSV
added 2026/01/13 4:16 p.m.7 views

UBUNTU-CVE-2025-68813

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in ipvsgetoutrt calls dstlinkfailure without ensuring skb-dev is set, leading to a NULL pointer dereference in fibcomputespecdst when ipv4linkfailure attempts t...

5.8AI score0.00179EPSS
SaveExploits0References38
OSV
OSV
added 2026/01/13 4:16 p.m.8 views

UBUNTU-CVE-2025-71080

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6getpcpuroute under PREEMPTRT On PREEMPTRT kernels, after rt6getpcpuroute returns NULL, the current task can be preempted. Another task running on the same CPU may then execute rt6makepcpuroute and successful...

7.5CVSS5.8AI score0.00264EPSS
SaveExploits0References14
ATTACKERKB
ATTACKERKB
added 2026/01/13 3:34 p.m.8 views

CVE-2025-71096

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Check for the presence of LSNLATYPEDGID correctly The netlink response for RDMANLLSOPIPRESOLVE should always have a LSNLATYPEDGID attribute, it is invalid if it does not. Use the nl parsing logic properly and call...

5.3AI score0.00119EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2026/01/13 3:29 p.m.15 views

CVE-2025-68813

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in ipvsgetoutrt calls dstlinkfailure without ensuring skb-dev is set, leading to a NULL pointer dereference in fibcomputespecdst when ipv4linkfailure attempts t...

5.3AI score0.00179EPSS
SaveExploits0
Fedora
Fedora
added 2026/01/13 1:13 a.m.10 views

[SECURITY] Fedora 42 Update: NetworkManager-l2tp-1.52.0-1.fc42

This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager...

3.3CVSS7AI score0.00162EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-71098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip6gre: make ip6greheader robust Over the years, syzbot found many ways to crash the kernel in ip6greheader 1. This involves team or bonding drivers ability to...

5.5CVSS6AI score0.00119EPSS
SaveExploits0References3
Redos
Redos
added 2026/01/13 12:00 a.m.8 views

ROS-20260113-7370

A vulnerability in the nfsendreset6 function of the net/ipv6/netfilter/nfrejectipv6.c component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.5CVSS6.5AI score0.00529EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.10 views

PT-2026-2618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the IPv4 implementation when using error routes with nexthop objects. Specifically, when a nexthop object is deleted, error routes do not get flushed,...

5.5CVSS5.3AI score0.00119EPSS
SaveExploits0
NVD
NVD
added 2026/01/12 7:16 a.m.11 views

CVE-2026-0855

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device...

8.8CVSS0.011EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:24 a.m.10 views

CVE-2021-31552

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly executed certain rules related to blocking accounts after account creation. Such rules would allow for user accounts to be created while blocking only the IP address used to create an account and not...

5.5CVSS6.8AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:57 a.m.8 views

CVE-2022-38767

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure...

7.5CVSS7.5AI score0.01028EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:19 a.m.14 views

CVE-2021-31344

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. ICMP echo packets with fake IP...

6.9CVSS7AI score0.01409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/09 12:00 a.m.15 views

PT-2026-2021

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A heap-based buffer overflow in the ALGO 8180 IP Audio Alerter can lead to remote code execution. This is a zero-day vulnerability. Recommendations At the moment, there is ...

8.1CVSS7.9AI score0.00642EPSS
SaveExploits0References2
Rows per page
Query Builder