Lucene search
+L

9676 matches found

Microsoft CVE
Microsoft CVE
added 2025/03/13 7:00 a.m.6 views

tpm: Change to kvalloc() in eventlog/acpi.c

...

5.5CVSS7.2AI score0.00238EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/03/12 6:30 p.m.11 views

CVE-2025-0115 PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface web, SSH, console, or telnet and successfully authenticate to exploit this issue. You can greatly...

6.8CVSS6.5AI score0.00188EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/12 3:40 p.m.16 views

CVE-2025-0813

creationtimestamp| type| source ---|---|--- 2025-03-12 15:40:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7322 2025-03-18 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-077-01...

7CVSS4.8AI score0.00269EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/11 8:07 p.m.11 views

GHSA-48G7-3X6R-XFHP Arbitrary Code Execution via Crafted Keras Config for Model Loading

Impact The Keras Model.loadmodel function permits arbitrary code execution, even with safemode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their...

7.3CVSS7.1AI score0.02581EPSS
SaveExploits3References8
Github Security Blog
Github Security Blog
added 2025/03/11 8:07 p.m.18 views

Arbitrary Code Execution via Crafted Keras Config for Model Loading

Impact The Keras Model.loadmodel function permits arbitrary code execution, even with safemode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their...

9.8CVSS7.2AI score0.02581EPSS
SaveExploits3References8Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/11 12:29 p.m.11 views

CVE-2025-1550

A flaw was found in Keras. This vulnerability allows arbitrary code execution via a maliciously crafted .keras archive that manipulates the config.json file to load and execute arbitrary Python modules and functions, even with safemode=True. Mitigation In order to reduce the success of the attack...

8.2CVSS7.3AI score0.02581EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2025/03/11 12:00 a.m.11 views

PT-2025-10719

Name of the Vulnerable Software and Affected Versions Keras versions 3.0.0 through 3.7.9 Description The Keras Model.load model function allows for arbitrary code execution, even when safe mode is enabled. This occurs through a maliciously crafted .keras archive. An attacker can modify the...

9.8CVSS7.9AI score0.02581EPSS
SaveExploits3References39
Tenable Nessus
Tenable Nessus
added 2025/03/11 12:00 a.m.6 views

Windows Registry Enumerated Software Report

Reports details about software enumerated using the registry TRUSTED...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/11 12:00 a.m.8 views

MacOS X Applications Enumerated Software Report

Reports details about software enumerated from installed MacOS X applications TRUSTED...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2025/03/10 12:00 a.m.10 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a logic error vulnerability that originates from a code logic error in ppcfw.c's ppcfwdenysecdramaccess, which can be exploited by an attacker to cause an arbitrary read from the TEE memory without...

6.6CVSS7.2AI score0.00081EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-4207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to...

8.2CVSS7.4AI score0.00402EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2023-43642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of...

7.5CVSS6.3AI score0.0104EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2024-29040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be...

4.3CVSS5.8AI score0.00343EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-49100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enou...

4.4CVSS5.2AI score0.00224EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-47630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of getext and authnvctr...

7.4CVSS7AI score0.00629EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-29038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm2-tools is the source repository for the Trusted Platform Module TPM2.0 tools. A malicious attacker can generate arbitrary quote data which is not detected b...

4.3CVSS6.5AI score0.0037EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2014-5118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Trusted Boot tboot before 1.8.2 has a 'loader.c' Security Bypass Vulnerability CVE-2014-5118 Note that Nessus relies on the presence of the package as reported ...

5.5CVSS6.1AI score0.00386EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2017-16837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite...

7.8CVSS6.5AI score0.00413EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2021-24119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information...

4.9CVSS6.3AI score0.01484EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2020-1946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache SpamAssassin before 3.4.5, malicious rule configuration .cf files can be configured to run system commands without any output or errors. With this,...

10CVSS7.2AI score0.06132EPSS
SaveExploits0References2
Rows per page
Query Builder