Lucene search
K

1834 matches found

CNNVD
CNNVD
added 2025/09/09 12:0 a.m.3 views

Microsoft SMBv3 资源管理错误漏洞

Microsoft SMBv3 is a support firmware from Microsoft Corporation USA that provides SMB functionality for devices. A resource management error vulnerability exists in Microsoft SMBv3. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...

4.8CVSS6.5AI score0.02351EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.2 views

PT-2025-36843

Name of the Vulnerable Software and Affected Versions: Windows SMBv3 Client affected versions not specified Description: A use-after-free issue exists in the Windows SMBv3 Client. This allows an authorized attacker to execute code over a network. The vulnerability enables remote attackers to...

4.8CVSS7.1AI score0.02351EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/09/09 12:0 a.m.2 views

KB5065509: Windows Server 2012 Security Update (September 2025)

The remote Windows host is missing security update 5065509. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

9.8CVSS8.8AI score0.18834EPSS
Exploits4References35
Tenable Nessus
Tenable Nessus
added 2025/09/09 12:0 a.m.1 views

KB5065430: Windows 10 LTS 1507 Security Update (September 2025)

The remote Windows host is missing security update 5065430. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

9.8CVSS9.2AI score0.18834EPSS
Exploits4References31
Tenable Nessus
Tenable Nessus
added 2025/09/09 12:0 a.m.3 views

KB5065429: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2025)

The remote Windows host is missing security update 5065429. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...

9.8CVSS8.9AI score0.18834EPSS
Exploits4References46
Amazon
Amazon
added 2025/09/08 12:0 a.m.6 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in opencacheddir with lease breaks CVE-2025-37954 In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: prevent overflow in lookup table allocation...

7.8CVSS6.9AI score0.00358EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/06 8:11 a.m.4 views

smb3: fix for slab out of bounds on mount to ksmbd

...

7.1CVSS6.8AI score0.0014EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/06 8:10 a.m.3 views

smb/server: avoid deadlock when linking with ReplaceIfExists

...

5.5CVSS6.8AI score0.00111EPSS
Exploits0
Gitee
Gitee
added 2025/09/06 4:33 a.m.91 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...

10CVSS9AI score0.9981EPSS
Exploits124
SUSE CVE
SUSE CVE
added 2025/09/05 11:23 p.m.1 views

SUSE CVE-2025-38737

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3inittransformrq to initialise buffer to NULL before calling netfsallocfolioqbuffer as netfs assumes it can append to the buffer it is given. Setting it to NULL means it should...

7CVSS6.6AI score0.00143EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.2 views

PT-2025-36267

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the CIFS implementation where the smb3 init transform rq function does not initialize a buffer to NULL before calling netfs alloc folioq buffer...

6.3AI score0.00143EPSS
Exploits0References5
OSV
OSV
added 2025/09/04 4:15 p.m.4 views

AZL-73845 CVE-2025-38728 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

7.1CVSS5.6AI score0.0014EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 8:51 a.m.1 views

smb: client: fix use-after-free in cifs_oplock_break

...

7.8CVSS7AI score0.0015EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 6:17 a.m.2 views

smb: client: fix potential deadlock when releasing mids

...

7.8CVSS7AI score0.00186EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 5:56 a.m.0 views

smb: client: fix warning when reconnecting channel

...

7.1CVSS7AI score0.00141EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 5:22 a.m.2 views

smb: client: fix potential UAF in cifs_stats_proc_show()

...

7.8CVSS7AI score0.00265EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 5:12 a.m.3 views

smb: client: fix potential UAF in cifs_dump_full_key()

...

7.8CVSS7AI score0.00237EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 3:50 a.m.3 views

smb: prevent use-after-free due to open_cached_dir error paths

...

7.8CVSS7AI score0.00229EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:49 a.m.3 views

smb: client: fix use-after-free bug in cifs_debug_data_proc_show()

...

7.8CVSS7AI score0.00248EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 2:43 a.m.2 views

smb: client: fix potential UAF in cifs_debug_files_proc_show()

...

7.8CVSS7AI score0.00276EPSS
Exploits0
Rows per page
Query Builder