Lucene search
+L

14518 matches found

RedhatCVE
RedhatCVE
•added 2025/02/06 3:43 a.m.•21 views

CVE-2021-26620

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s...

7.5CVSS7.1AI score0.0135EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:10 p.m.•31 views

CVE-2022-33219

Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer...

9.3CVSS7.5AI score0.00137EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2025/02/05 6:15 p.m.•20 views

ALPINE-CVE-2025-23419

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...

5.3CVSS7.2AI score0.02795EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/02/05 6:15 p.m.•22 views

AZL-56483 CVE-2025-23419 affecting package nginx for versions less than 1.22.1-13

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...

5.3CVSS6.7AI score0.02795EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2025/02/05 6:15 p.m.•5 views

DEBIAN-CVE-2025-23419

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...

5.3CVSS6.5AI score0.02795EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2025/02/05 6:15 p.m.•21 views

AZL-56492 CVE-2025-23419 affecting package nginx for versions less than 1.25.4-3

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...

5.3CVSS6.7AI score0.02795EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/02/05 6:15 p.m.•29 views

UBUNTU-CVE-2025-23419

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when TLS Session Tickets...

5.3CVSS6.9AI score0.02795EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/02/05 2:13 p.m.•19 views

CVE-2020-11298

While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

7.8CVSS7AI score0.00137EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:42 a.m.•25 views

CVE-2024-21481

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager...

8.4CVSS7.1AI score0.00114EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:37 a.m.•19 views

CVE-2024-23365

Memory corruption while releasing shared resources in MinkSocket listener thread...

8.4CVSS7.2AI score0.00125EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:22 a.m.•20 views

CVE-2024-23355

Memory corruption when keymaster operation imports a shared key...

7.8CVSS7.2AI score0.0011EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:06 a.m.•23 views

CVE-2024-4347

The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDeleteCache function. This makes it possible for authenticated attackers to delete arbitrary files on the server, which can include wp-config.php files of the...

7.2CVSS6.5AI score0.00942EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/05 12:00 a.m.•27 views

Android mm/mremap.c Privilege Escalation

The vulnerability of the mm/mremap.c module in Android operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS5.5AI score
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/04 11:55 p.m.•12 views

CVE-2024-13504

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.2AI score0.00386EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/04 9:05 p.m.•73 views

Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service

Summary Numerous fixes to the Linux kernel for reported issues related to various security vulnerabilities such as demnial of service, unauthorized access, or leakage of sensitive data. Vulnerability Details CVEID:CVE-2020-26555 DESCRIPTION: Bluetooth Core and Mesh Specifications could allow a...

7.8CVSS8.8AI score0.0088EPSS
SaveExploits1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 4:59 p.m.•7 views

Malicious code in proton-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/02/03 4:59 p.m.•7 views

MAL-2025-862 Malicious code in proton-shared (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 4:41 p.m.•11 views

Malicious code in @infoserver/gov-shared-connections (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•14 views

Firefox Thunderbird DoS

The vulnerability in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution of processes using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

5.4CVSS6AI score0.00416EPSS
SaveExploits0References15Affected Software5
vulnersOsv
vulnersOsv
•added 2025/01/31 5:34 p.m.•2 views

org.wildfly.core:wildfly-core-feature-pack-common (23.0.0.beta4), org.wildfly.core:wildfly-core-galleon-pack (23.0.0.beta4) +89 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (23.0.0.beta4)

org.wildfly.core:wildfly-server MAVEN version 23.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 23.0.0.beta4 -...

6.5CVSS0.00774EPSS
SaveExploits0
Rows per page
Query Builder