Lucene search
K

6653 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/29 12:0 a.m.19 views

RHEL 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.0.6 (RHSA-2025:3357)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3357 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This...

7.5CVSS6.6AI score0.01966EPSS
Exploits2References13
SUSE Linux
SUSE Linux
added 2025/03/28 7:33 p.m.1 views

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001023 fixes one issue. The following security issue was fixed: CVE-2024-57882: mptcp: fix TCP options overflow. bsc1235916. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

7.1CVSS7.5AI score0.0022EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/03/28 3:1 a.m.1 views

SUSE CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

5.5CVSS7.5AI score0.00161EPSS
Exploits0References15
NVD
NVD
added 2025/03/27 11:15 p.m.12 views

CVE-2025-2885

Missing validation of the root metatdata version number could allow an actor to supply an arbitrary version number to the client instead of the intended version in the root metadata file, altering the version fetched by the client. Users should upgrade to tough version 0.20.0 or later and ensure...

5.7CVSS0.00269EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/27 10:23 p.m.20 views

CVE-2025-2887 Failure to detect delegated target rollback in tough

During a target rollback, the client fails to detect the rollback for delegated targets. This could cause the client to fetch a target from an incorrect source, altering the target contents. Users should upgrade to tough version 0.20.0 or later and ensure any forked or derivative code is patched ...

5.7CVSS0.00269EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2025/03/27 2:52 p.m.3 views

buecher.de Cross Site Scripting vulnerability OBB-4040874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
NVD
NVD
added 2025/03/27 2:15 p.m.9 views

CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS0.00161EPSS
Exploits0References3
OSV
OSV
added 2025/03/27 2:15 p.m.1 views

DEBIAN-CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS5.7AI score0.00161EPSS
Exploits0References1
OSV
OSV
added 2025/03/27 2:15 p.m.3 views

UBUNTU-CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS6.5AI score0.00161EPSS
Exploits0References15
Cvelist
Cvelist
added 2025/03/27 1:38 p.m.8 views

CVE-2025-21869 powerpc/code-patching: Disable KASAN report during patching via temporary mm

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

0.00161EPSS
Exploits0References3
CVE
CVE
added 2025/03/27 1:38 p.m.117 views

CVE-2025-21869

Summary: CVE-2025-21869 is tied to a Linux kernel PowerPC code-patching issue where KASAN reports could trigger during patching on certain hardware (Talos II with kernel 6.13). Root cause: patching instructions could write into user-address-space memory under KASAN instrumentation, causing a KASA...

7.8CVSS6.8AI score0.00161EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2025/03/27 1:38 p.m.5 views

CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS5.7AI score0.00161EPSS
Exploits0
OSV
OSV
added 2025/03/27 1:38 p.m.5 views

CVE-2025-21869 powerpc/code-patching: Disable KASAN report during patching via temporary mm

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS5.9AI score0.00161EPSS
Exploits0References6
Openbugbounty
Openbugbounty
added 2025/03/27 3:15 a.m.3 views

east-view-self-catering.island-mahe-hotels.com Cross Site Scripting vulnerability OBB-4040694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from disabling KASAN reporting during patching via temporary mm, which could lead to user memory access...

7.8CVSS6.5AI score0.00161EPSS
Exploits0References5
Openbugbounty
Openbugbounty
added 2025/03/26 6:5 p.m.8 views

archives.realvail.com Cross Site Scripting vulnerability OBB-4040635

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2025/03/26 5:39 p.m.2 views

anzenbergergallery-bookshop.com Cross Site Scripting vulnerability OBB-4040508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Amazon
Amazon
added 2025/03/26 12:0 a.m.6 views

Important: kernel-livepatch-5.10.234-225.910

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts CVE-2025-21647 Affected Packages: kernel-livepatch-5.10.234-225.910 Issue Correction: Please ensure you have live patching enabled. Run yum updat...

7.1CVSS6.7AI score0.00252EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/03/26 12:0 a.m.17 views

Microsoft Windows Multiple Vulnerabilities (KB5050009)

This host is missing an important security update according to Microsoft KB5050009 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.2AI score0.80769EPSS
Exploits12References3
Cvelist
Cvelist
added 2025/03/25 10:55 p.m.13 views

CVE-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...

6.1CVSS0.0019EPSS
Exploits0References1
Rows per page
Query Builder