Lucene search
+L

22820 matches found

Positive Technologies
Positive Technologies
added 2025/12/30 12:00 a.m.20 views

PT-2025-53956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to TCP socket handling. Specifically, the sk error queue is not properly purged during socket closure, potentially leading to memory leaks and...

7.8CVSS6.2AI score0.0094EPSS
SaveExploits2References848
RedhatCVE
RedhatCVE
added 2025/12/27 6:38 a.m.16 views

CVE-2025-62578

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information...

7.5CVSS6.9AI score0.00376EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/26 6:05 a.m.3 views

CVE-2025-62578 DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information...

7.2CVSS6.5AI score0.00376EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/26 6:05 a.m.9 views

EUVD-2025-205427

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information...

7.2CVSS6.4AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/26 12:00 a.m.14 views

PT-2025-53451

Name of the Vulnerable Software and Affected Versions DVP-12SE affected versions not specified Description The DVP-12SE device transmits sensitive information in cleartext via the Modbus/TCP protocol. This allows potential attackers to intercept and read sensitive data. The device does not employ...

7.5CVSS6.3AI score0.00376EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2025/12/26 12:00 a.m.6 views

The vulnerability of the tcp_metrics component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the tcpmetrics component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6AI score0.00376EPSS
SaveExploits0References5Affected Software3
SUSE CVE
SUSE CVE
added 2025/12/25 1:05 a.m.10 views

SUSE CVE-2022-50717

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmettcphandleh2cdatapdu, add a bounds check to avoid out-of-bounds access...

7CVSS6.5AI score0.00792EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2025/12/25 12:55 a.m.6 views

SUSE CVE-2023-54085

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflowsynrecvsock deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not...

5.9CVSS6.5AI score0.00417EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/25 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-50717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmettcphandleh2cdatapdu, add a bounds check to avoid out-of-bounds access...

9.8CVSS5.6AI score0.00792EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/25 12:00 a.m.8 views

PT-2026-31940

Name of the Vulnerable Software and Affected Versions Apache Log4j Core versions 2.21.0 through 2.25.3 Description The Rfc5424Layout component is susceptible to log injection via CRLF Carriage Return Line Feed sequences. This occurs because security-relevant configuration attributes were renamed...

7.5CVSS6.6AI score0.00831EPSS
SaveExploits0References17
NVD
NVD
added 2025/12/24 8:15 p.m.10 views

CVE-2019-25243

FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts. Attackers can exploit unsanitized input parameters to inject and execute arbitrary shell commands with root privileges by manipulating the 'strInIP' and 'strInPort'...

8.8CVSS0.02644EPSS
SaveExploits2References3
OSV
OSV
added 2025/12/24 8:15 p.m.11 views

CVE-2019-25243

FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts. Attackers can exploit unsanitized input parameters to inject and execute arbitrary shell commands with root privileges by manipulating the 'strInIP' and 'strInPort'...

8.7CVSS6AI score0.02644EPSS
SaveExploits2References3
CVE
CVE
added 2025/12/24 7:27 p.m.37 views

CVE-2019-25243

FaceSentry 6.4.8 has an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php. The root cause is unsanitized inputs in strInIP/strInPort, enabling arbitrary shell commands with root privileges. Affected product: FaceSentry 6.4.8. Impact is described as high. Rem...

8.8CVSS7.8AI score0.02644EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2025/12/24 7:27 p.m.44 views

CVE-2019-25243 FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping Test

FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php scripts. Attackers can exploit unsanitized input parameters to inject and execute arbitrary shell commands with root privileges by manipulating the 'strInIP' and 'strInPort'...

8.8CVSS0.02644EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/12/24 3:30 p.m.7 views

EUVD-2022-55778

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

6AI score0.00243EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/24 1:16 p.m.10 views

CVE-2023-54085

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflowsynrecvsock deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not...

7.5CVSS0.00417EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.11 views

CVE-2022-50783

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

0.00243EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2025/12/24 1:16 p.m.8 views

CVE-2022-50783

In the Linux kernel, the following vulnerability has been resolved: mptcp: use proper req destructor for IPv6 Before, only the destructor from TCP request sock in IPv4 was called even if the subflow was IPv6. It is important to use the right destructor to avoid memory leaks with some advanced IPv...

5.5AI score0.00243EPSS
SaveExploits0References6
NVD
NVD
added 2025/12/24 1:15 p.m.9 views

CVE-2022-50717

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmettcphandleh2cdatapdu, add a bounds check to avoid out-of-bounds access...

9.8CVSS0.00792EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/12/24 1:06 p.m.38 views

CVE-2023-54085 mptcp: fix NULL pointer dereference on fastopen early fallback

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer dereference on fastopen early fallback In case of early fallback to TCP, subflowsynrecvsock deletes the subflow context before returning the newly allocated sock to the caller. The fastopen path does not...

7.5CVSS0.00417EPSS
SaveExploits0References2
Rows per page
Query Builder