Lucene search
+L

23877 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-53841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - devlink: report devlinkporttypewarn source device devlinkporttypewarn is scheduled for port devlink and warning when the port type is not set. But from this...

5.6AI score0.00251EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/08 10:15 p.m.16 views

CVE-2025-14276

A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. Impacted is an unknown function of the file /ajax/php/leafsearch.php. This manipulation of the argument line causes command injection. The attack can be initiated remotely. A high degree of complexity is needed for the...

6.3CVSS0.01632EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/08 3:31 a.m.8 views

EUVD-2025-201647

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

5.9AI score0.00157EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/08 1:16 a.m.6 views

CVE-2025-40297

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

7.8CVSS0.00157EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/08 1:16 a.m.1 views

DEBIAN-CVE-2025-40297

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

7.8CVSS5.3AI score0.00157EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/08 1:16 a.m.12 views

UBUNTU-CVE-2025-40297

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

7.8CVSS5.7AI score0.00157EPSS
SaveExploits0References29
CVE
CVE
added 2025/12/08 12:46 a.m.52 views

CVE-2025-40297

CVE-2025-40297 affects the Linux kernel network bridge code. A race between learning FDB entries and deleting a port can allow fdb learning when a port is being removed, due to MST bypassing the port state and VLAN filtering being disabled during deletion. The fix adds a check for the port’s VLAN...

7.8CVSS6AI score0.00157EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/12/08 12:46 a.m.8 views

CVE-2025-40297

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

7.8CVSS5.3AI score0.00157EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/12/08 12:46 a.m.40 views

CVE-2025-40297 net: bridge: fix use-after-free due to MST port state bypass

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

7.8CVSS0.00157EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/08 12:46 a.m.9 views

CVE-2025-40297 net: bridge: fix use-after-free due to MST port state bypass

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition between learning still happening and a port being deleted, after all its...

7.8CVSS6.3AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/12/08 12:00 a.m.21 views

PT-2025-49477

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the vc screen module. Specifically, a struct vc data pointer in the vcs write function can be freed by vc port destruct after a ca...

7.8CVSS6.7AI score0.00932EPSS
SaveExploits2References902
CNNVD
CNNVD
added 2025/12/08 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an MST port state bypass that could lead to reuse after release...

6.1AI score0.00157EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-40297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: fix use-after-free due to MST port state bypass syzbot reported1 a use-after-free when deleting an expired fdb. It is due to a race condition betwe...

7.8CVSS7AI score0.00157EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/05 7:15 p.m.11 views

UBUNTU-CVE-2025-66570

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS5.7AI score0.00336EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/05 6:18 p.m.11 views

EUVD-2025-201455

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS6.5AI score0.00336EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/12/05 12:26 a.m.8 views

SUSE CVE-2025-40222

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrunreg is specified as a memory offset, while for other SCIF types it is a...

6.7AI score0.00186EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/05 12:09 a.m.19 views

CVE-2025-54304

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When they are powered on, an X11 display server is started. The display server listens on all network interfaces and is accessible over port 6000. The X11 access control list, by default, allows connections from...

9.8CVSS7.6AI score0.00499EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/05 12:09 a.m.25 views

CVE-2025-53963

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with netwo...

9.8CVSS7.8AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/04 11:15 p.m.14 views

CVE-2025-13373

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...

8.7CVSS0.00443EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/04 10:50 p.m.34 views

CVE-2025-13373 Advantech iView SQL Injection

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...

8.7CVSS0.00443EPSS
SaveExploits0References3
Rows per page
Query Builder