Lucene search
+L

625 matches found

OSV
OSV
added 2022/07/06 7:15 p.m.3 views

DEBIAN-CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.5AI score0.00422EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/06 7:15 p.m.24 views

Design/Logic Flaw

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

4.9CVSS6.4AI score0.00422EPSS
SaveExploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/07/06 7:15 p.m.5 views

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.8AI score0.00422EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2022/07/06 7:15 p.m.51 views

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.8AI score0.00422EPSS
SaveExploits0References28
OSV
OSV
added 2022/07/06 7:15 p.m.5 views

UBUNTU-CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS6.7AI score0.00422EPSS
SaveExploits0References29
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.5 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates from a use-after-free timer handler in net/rose/rosetimer.c. An attacker who exploits this vulnerability...

5.5CVSS6.4AI score0.00422EPSS
SaveExploits0References33
CVE
CVE
added 2022/07/06 12:0 a.m.170 views

CVE-2022-2318

CVE-2022-2318 is a use-after-free vulnerability in the Linux kernel's Rose (net/rose/rose_timer.c) timer handler that can cause denial of service (crash) with local privileges. Connected advisories confirm the vulnerability affects Linux kernel releases and note fixed versions: Debian security ad...

5.5CVSS6.8AI score0.00422EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2022/07/05 3:6 p.m.60 views

CVE-2022-2318

There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges...

5.5CVSS4.7AI score0.00422EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/07/03 12:0 a.m.9 views

PT-2022-5551 · Linux +5 · Linux +5

Name of the Vulnerable Software and Affected Versions: linux affected versions not specified Description: The issue is related to use-after-free vulnerabilities caused by a timer handler in the net/rose/rose timer.c component of the Linux kernel. This allows attackers to crash the Linux kernel...

9.8CVSS7.7AI score0.67994EPSS
SaveExploits226References1743
CNNVD
CNNVD
added 2022/05/11 12:0 a.m.6 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a path contention issue in roseconnect...

7CVSS7.3AI score0.00258EPSS
SaveExploits1References4
Openbugbounty
Openbugbounty
added 2022/03/07 12:19 p.m.17 views

blackrosesolutions.co.uk Improper Access Control vulnerability OBB-2414205

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/02/11 9:32 p.m.40 views

Valentine’s Day Malware Attack Mimics Flower Store

With Valentine’s Day approaching this weekend, several people have received “recent order” email confirmations for flowers or lingerie. These emails are actually part of a spear-phishing attack, which ultimately leads recipients to a malicious document that executes the BazaLoader malware. The...

0.2AI score
SaveExploits0References12
Openbugbounty
Openbugbounty
added 2020/08/27 6:55 a.m.6 views

rose-transports.be Cross Site Scripting vulnerability OBB-1279014

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2018/09/20 9:7 p.m.19 views

Lucy Gang Debuts with Unusual Android MaaS Package

There’s a fresh bloom in the malware-as-a-service garden: Researchers have uncovered a new Russian-speaking threat actor hawking a proprietary cyber-weapon dubbed “Black Rose Lucy.” The offering is a malware-as-a-service MaaS bundle with two parts, consisting of a controlling web interface which...

0.4AI score
SaveExploits0References2
Carbon Black Blog
Carbon Black Blog
added 2018/02/14 3:15 p.m.27 views

February 14, 2018 – Morning Cyber Coffee Headlines – “Valentine’s Day” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 14 2018 - Headlines Carbon Black in the News: Endpoint security suites...

6.8AI score
SaveExploits0
Carbon Black Blog
Carbon Black Blog
added 2018/01/02 1:46 p.m.49 views

January, 2 2017 – Morning Cyber Coffee Headlines – “Rose Bowl” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 2, 2018 - Headlines Carbon Black in the News: Bitcoin concerns rising a...

6.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/10/25 3:27 p.m.10 views

goldenrose.co.il XSS vulnerability

Open Bug Bounty ID: OBB-367653 Description| Value ---|--- Affected Website:| goldenrose.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/10/09 3:43 p.m.8 views

pandahall.com XSS vulnerability

Vulnerable URL: http://www.pandahall.com/p-1037365-tibetan-style-alloy-pendant-cabochon-settings-heart-with-rose-antique-silver.html?paLb="%3E%3Csvg/onload=alert'OPENBUGBOUNTY'%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS...

6.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2017/10/03 1:29 a.m.1 views

CVE-2015-7980

Cross-site scripting XSS vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaScript library from an external source that was not reliable."...

6.1CVSS5.8AI score0.01271EPSS
SaveExploits0References6
Prion
Prion
added 2017/10/03 1:29 a.m.10 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaScript library from an external source that was not reliable."...

4.3CVSS6.1AI score0.01271EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder