Lucene search
+L

601 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•3 views

CVE-2025-62229: Use After Free

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

7.3CVSS8AI score0.00508EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/10/29 12:23 a.m.•13 views

SUSE CVE-2025-62229

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

7.5CVSS8.1AI score0.00508EPSS
SaveExploits0References24
Zero Day Initiative
Zero Day Initiative
•added 2025/10/29 12:00 a.m.•10 views

X.Org Server present_create_notifies Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.8CVSS7.9AI score0.00508EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/28 12:15 p.m.•10 views

CVE-2025-40067

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation requires at least one bit in the $BITMAP attribute to track usage of index entries. If the bitmap is empty while index blocks are already...

7.8CVSS0.00165EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•17 views

PT-2025-44228

Name of the Vulnerable Software and Affected Versions X.Org X Server and Xwayland versions 2:21.1.16-1ubuntu1.2 through 2:24.1.6-1ubuntu0.2 Description A flaw exists in the X.Org X server and Xwayland when handling X11 Present extension notifications. Improper error handling during notification...

7.8CVSS8.1AI score0.00508EPSS
SaveExploits0References178
OSV
OSV
•added 2025/10/28 12:00 a.m.•14 views

UBUNTU-CVE-2025-62229

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

7.3CVSS8.1AI score0.00508EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/16 12:00 a.m.•8 views

Fedora 41 : httpd (2025-f94e6fe0b4)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f94e6fe0b4 advisory. New version 2.4.64 and security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

9.1CVSS7AI score0.03914EPSS
SaveExploits1References7
Circl
Circl
•added 2025/10/14 4:37 p.m.•10 views

CVE-2025-23280

creationtimestamp| type| source ---|---|--- 2025-10-14 16:37:21+00:00| seen| https://infosec.exchange/users/quarkslab/statuses/115373496104721728 2025-10-14 16:37:26+00:00| seen| https://bsky.app/profile/quarkslab.bsky.social/post/3m365zvlfh22t 2025-10-15 00:30:25+00:00| seen|...

7CVSS7.1AI score0.00236EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/07 4:15 p.m.•14 views

UBUNTU-CVE-2023-53678

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initialized for some reason - in practice on platforms without display - suspending fbdev should be skipped during system suspend, fix this up. While at...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 3:21 p.m.•16 views

EUVD-2025-32737

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix system suspend without fbdev being initialized If fbdev is not initialized for some reason - in practice on platforms without display - suspending fbdev should be skipped during system suspend, fix this up. While at...

5.7AI score0.00143EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/07 3:19 p.m.•16 views

CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

8.8CVSS6.2AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/10/07 3:19 p.m.•24 views

CVE-2023-53630

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

8.8CVSS5.9AI score0.00184EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/10/07 3:19 p.m.•28 views

CVE-2023-53630 iommufd: Fix unpinning of pages when an access is present

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix unpinning of pages when an access is present syzkaller found that the calculation of batchlastindex should use 'startindex' since at input to this function the batch is either empty or it has already been adjusted to...

8.8CVSS0.00184EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/07 2:43 p.m.•6 views

Malicious code in card-present-integration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2025/10/07 2:43 p.m.•6 views

MAL-2025-48355 Malicious code in card-present-integration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-0634

Malware in sbrugna...

7.5CVSS7.8AI score0.10564EPSS
SaveExploits0References54
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-59774

Malicious code in bioql PyPI...

10CVSS6.6AI score0.00813EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/03 11:17 a.m.•41 views

CVE-2025-7825

CVE-2025-7825 affects Schema Plugin For Divi, Gutenberg & Shortcodes (WordPress) up to version 4.3.2. The flaw is Object Instantiation via deserialization of untrusted input through the wpt_schema_breadcrumbs shortcode. Exploitation requires authenticated access at Contributor level or higher; th...

6.3CVSS6.5AI score0.00264EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/28 2:45 p.m.•3 views

MINI-7W4Q-P7QQ-G5VP

Bulletin has no description...

5.4CVSS7AI score0.0033EPSS
SaveExploits0
OSV
OSV
•added 2025/09/28 2:24 p.m.•3 views

MINI-XPPJ-Q6QW-RPJ8

Bulletin has no description...

5.4CVSS7AI score0.0033EPSS
SaveExploits0
Rows per page
Query Builder