Lucene search
+L

1934 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2021-38443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS8.1AI score0.02128EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2023-35936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior...

6.1CVSS5.8AI score0.00368EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2022-49625

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sfc: fix kernel panic when creating VF When creating VFs a kernel panic can happen when calling to efxef10tryupdatenicstatsvf. When releasing a DMA coherent...

5.5CVSS6.1AI score0.00287EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2014-9421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The authgssapiunwrapdata function in lib/rpc/authgssapimisc.c in MIT Kerberos 5 aka krb5 through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does no...

9CVSS7.8AI score0.06213EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2016-8610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets...

7.5CVSS6.7AI score0.39657EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2016-9922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cirrusdocopy function in hw/display/cirrusvga.c in QEMU aka Quick Emulator, when cirrus graphics mode is VGA, allows local guest OS privileged users to caus...

5.5CVSS6.8AI score0.00413EPSS
SaveExploits0References2
Android Security Bulletins
Android Security Bulletins
•added 2025/03/03 12:00 a.m.•46 views

Wear OS Security Bulletin—March 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2025-03-05 or later from the March 2025 Android Security Bulletin in addition to all issues in this bulletin. We encourage all...

7.8CVSS7.7AI score0.00081EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/01 12:26 a.m.•11 views

CVE-2025-25727

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext...

6.2CVSS6.6AI score0.00162EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/27 2:47 p.m.•11 views

CVE-2024-56494 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

3.3CVSS3.4AI score0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/27 2:47 p.m.•14 views

CVE-2024-56812 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

3.3CVSS3.4AI score0.0015EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/02/27 3:15 a.m.•14 views

CVE-2025-21736

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfsfiemap Since nilfsbmaplookupcontig in nilfsfiemap calculates its result by being prepared to go through potentially maxblocks == INTMAX blocks, the value in n may experience an overflow...

5.5CVSS6.3AI score0.00256EPSS
SaveExploits0References49
UbuntuCve
UbuntuCve
•added 2025/02/27 2:15 a.m.•16 views

CVE-2025-21731

In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbdconfig UAF: 1 grab nbdconfig temporarily; 2 nbdgenldisconnect flush all recvwork and release the initial reference: nbdgenldisconnect nbddisconnectandput...

7.8CVSS6.4AI score0.00231EPSS
SaveExploits0References49
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•14 views

Motorola Mobility Droid Razr HD (Model XT926) System 访问控制错误漏洞

The Motorola Mobility Droid Razr HD Model XT926 System is an Android system from Motorola USA that comes with the Motorola Droid Razr HD cell phone. It is used to drive and manage the features of the Motorola Droid Razr HD cell phone. A security vulnerability exists in the Motorola Mobility Droid...

4.6CVSS6.3AI score0.00205EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/26 12:39 p.m.•10 views

Security Bulletin: Vulnerability in requests affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0)[CVE-2023-32681]

Summary The requests package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVE CVE-2023-32681 Vulnerability Details CVEID:CVE-2023-32681 DESCRIPTION: Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking...

6.1CVSS6.2AI score0.02974EPSS
SaveExploits2Affected Software1
NVD
NVD
•added 2025/02/26 7:01 a.m.•23 views

CVE-2022-49719

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic/realview: Fix refcount leak in realviewgicofinit offindmatchingnodeandmatch returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcoun...

5.5CVSS0.00266EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2025/02/26 7:01 a.m.•11 views

CVE-2022-49493

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix errorenous cleanup order There is a logic error when removing rt5645 device as the function rt5645i2cremove first cancel the &rt5645-jackdetectwork and delete the &rt5645-btnchecktimer latter. However, since the...

7.8CVSS6AI score0.00268EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2025/02/26 7:01 a.m.•12 views

CVE-2022-49731

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong? case that the 'ppi' parameter of atahostallocpinfo points to an array starting with a NULL pointer, there's going to be a kernel oop...

5.5CVSS6AI score0.0028EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2025/02/26 7:01 a.m.•18 views

CVE-2022-49647

In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinned by its tasks. When we're moving tasks around across csets for a migration, we need to hold the source and destination csets to...

7.8CVSS6AI score0.00289EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2025/02/26 7:01 a.m.•16 views

CVE-2022-49456

In the Linux kernel, the following vulnerability has been resolved: bonding: fix missed rcu protection When removing the rcureadlock in bondethtoolgettsinfo as discussed 1, I didn't notice it could be called via setsockopt, which doesn't hold rcu lock, as syzbot pointed: stack backtrace: CPU: 0...

7.8CVSS5.9AI score0.00272EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2025/02/26 6:37 a.m.•16 views

CVE-2021-47654

In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix pathlist memory leak Clang static analysis reports this error sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'pathlist' ret = 0; ^ pathlist is allocated in parsepath but never freed...

5.5CVSS6.1AI score0.00261EPSS
SaveExploits0References6
Rows per page
Query Builder