Lucene search
+L

3906 matches found

OSV
OSV
added 2025/02/26 2:13 a.m.13 views

CVE-2022-49534 scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGIRJT There is a potential memory leak in lpfcignoreelscmpl and lpfcelsrspreject that was allocated from NPIV PLOGIRJT lpfcrcvplogi's loginmbox. Check if...

5.5CVSS5.2AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/02/26 1:55 a.m.56 views

CVE-2022-49134

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Guard against invalid local ports When processing events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not for the CPU port local port 0,...

5.5CVSS5.7AI score0.00231EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/02/26 1:55 a.m.20 views

CVE-2022-49134 mlxsw: spectrum: Guard against invalid local ports

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Guard against invalid local ports When processing events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not for the CPU port local port 0,...

0.00231EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/26 1:55 a.m.3 views

CVE-2022-49134 mlxsw: spectrum: Guard against invalid local ports

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum: Guard against invalid local ports When processing events generated by the device's firmware, the driver protects itself from events reported for non-existent local ports, but not for the CPU port local port 0,...

6.4AI score0.00231EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.19 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from tty: goldfish not properly destroying ports in the wrong path...

5.5CVSS5.5AI score0.00257EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/02/25 12:00 a.m.10 views

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Linux Kernel Observable Discrepancy (CVE-2022-32296)

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 Double-Hash Port Selection Algorithm of RFC 6056. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

3.3CVSS6.5AI score0.00428EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/02/24 1:30 p.m.17 views

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

6.9CVSS6.9AI score0.00231EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/15 12:15 a.m.6 views

CVE-2024-10405

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...

5.3CVSS7.3AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/15 12:00 a.m.10 views

Broadcom SANnav 安全漏洞

Broadcom SANnav is a suite of SAN management platforms from Broadcom Corporation USA. A security vulnerability exists in Broadcom SANnav that stems from a weak TLS cipher enabled on ports 443 and 18082...

6.9CVSS6.7AI score0.00196EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/14 11:23 p.m.10 views

CVE-2024-10405 Weak TLS Ciphers on Brocade SANnav port 443 & 18082

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...

6.9CVSS7.1AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/13 12:00 a.m.9 views

PT-2025-6497 · Brocade · Brocade Sannav +1

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1b Description: The issue allows an attacker to read the Brocade SANnav data stream, which includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, and IP...

6.9CVSS7.1AI score0.00196EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mlxsw: spectrumbuffers: Fixed memory corruption on Spectrum-4 systems The following two shared buffer operations utilize the Shared Buffer Status Register SBSR: devlink sb occupancy snapshot pci/0000:01:00.0 devlink sb occupan...

5.5CVSS6.8AI score0.0022EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix for out-of-bound access issues. If a ATU violation was caused by a CPU Load operation, the SPID could be larger than DSAMAXPORTS the size of the mv88e6xxxchip.ports array...

8.8CVSS6.2AI score0.00355EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:31 a.m.17 views

CVE-2021-44679

An issue 3 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

9.8CVSS6.9AI score0.01813EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/06 3:25 a.m.15 views

CVE-2021-44681

An issue 5 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

9.8CVSS6.9AI score0.01813EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/06 2:24 a.m.7 views

CVE-2025-22450

Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports...

7.5CVSS7AI score0.00383EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 4:33 p.m.17 views

CVE-2020-16097

On controllers running versions of v8.20 prior to vCR8.20.200221b distributed in v8.20.1093MR2, v8.10 prior to vGR8.10.179 distributed in v8.10.1211MR5, v8.00 prior to vGR8.00.165 Distributed in v8.00.1228MR6, v7.90 prior to vGR7.90.165 distributed in v7.90.1038MRX, v7.80 or earlier, It is possib...

7.3CVSS6.7AI score0.00306EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/04 10:16 p.m.11 views

CVE-2024-35199

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to localhost by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTor...

8.2CVSS8.1AI score0.00631EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/30 8:15 p.m.13 views

CVE-2024-10604

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances...

5.3CVSS5.8AI score0.00231EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/30 8:15 p.m.49 views

UBUNTU-CVE-2024-10603

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances...

6.3CVSS5.8AI score0.00268EPSS
SaveExploits1References5
Rows per page
Query Builder