CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3036 matches found

CVE•added 2025/10/04 3:16 p.m.•23 views

CVE-2023-53554

CVE-2023-53554 affects the Linux kernel staging/ ks7010 driver: ks_wlan_set_encode_ext() uses exc->key_len (u16) from user, and if it exceeds IW_ENCODING_TOKEN_MAX (64) this can cause memory corruption. The connected advisories (SUSE/OpenVAS/Nessus blocks) confirm kernel remediation but do not...

7.8CVSS6.5AI score0.00169EPSS

SaveExploits0References8Affected Software1

OSV•added 2025/10/04 3:16 p.m.•5 views

CVE-2023-53554 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()

In the Linux kernel, the following vulnerability has been resolved: staging: ks7010: potential buffer overflow in kswlansetencodeext The "exc-keylen" is a u16 that comes from the user. If it's over IWENCODINGTOKENMAX 64 that could lead to memory corruption...

7.8CVSS6.8AI score0.00169EPSS

SaveExploits0References11

Cvelist•added 2025/10/04 3:16 p.m.•22 views

CVE-2023-53543 vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add max vqp attr to vdpanlpolicy for nlattr length check The vdpanlpolicy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr pointe...

0.00154EPSS

SaveExploits0References4

OSV•added 2025/10/04 8:15 a.m.•8 views

UBUNTU-CVE-2025-39942

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remainingdatalength respects maxfragmentedrecvsize This is inspired by the check for dataoffset + datalength...

5.5CVSS6.2AI score0.00136EPSS

SaveExploits0References18

CNNVD•added 2025/10/04 12:0 a.m.•5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing nlapolicy for the vdpa max vqp attribute, which could lead to out-of-bounds reads...

5.8AI score0.00154EPSS

SaveExploits0References4

Positive Technologies•added 2025/10/04 12:0 a.m.•17 views

PT-2025-40685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vdpa nl policy structure, used for validating netlink attributes nlattr during message parsing, lacked a necessary check for the maximum virtual queue pair VQP attribute. This missin...

7.8CVSS6.6AI score0.0025EPSS

SaveExploits0