865 matches found
CVE-2023-53149
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid deadlock in fs reclaim with page writeback Ext4 has a filesystem wide lock protecting ext4writepages calls to avoid races with switching of journalled data flag or inode format. This lock can however cause a deadlock...
AZL-67121 CVE-2025-48041 affecting package erlang for versions less than 25.3.2.21-4
Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5....
EEF-CVE-2025-48039 Unverified Paths can Cause Excessive Use of System Resources
Summary Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh ssh\sftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh\sftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...
CVE-2025-55053
CWE-328: Use of Weak Hash...
CVE-2025-55051
CVE-2025-55051 corresponds to CWE-1392 (Use of Default Credentials) with a CVSSv3.1 base score 10.0 (CRITICAL, NETWORK, no user interaction) affecting Baicells devices: Nova436Q; Nova430e/430i; NEUTRINO430; NOVA846. Root cause stated: default credentials being used leads to security feature bypas...
Fedora 42 : snapshot (2025-ed3d0ab54b)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ed3d0ab54b advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...
Fedora 42 : kea (2025-92b4ae7199)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-92b4ae7199 advisory. - New version 3.0.1 rhbz2391289 - Fixes CVE-2025-40779 rhbz2391373 Tenable has extracted the preceding description block directly from the Fedora security...
CVE-2025-58280
Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2018-15952
creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:35+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
GHSA-5JCH-XHW4-R43V Google Sign-In for Rails allowed redirect to protocol-relative URI
Summary It is possible to redirect a user to another origin if the "proceedto" value in the session store is set to a protocol-relative URL. Details The googlesignin gem persists an optional URL for redirection after authentication. If this URL is set to a protocol-relative URL, it improperly...
CVE-2024-30018
creationtimestamp| type| source ---|---|--- 2025-08-27 21:18:36+00:00| seen| Telegram/Xb6XJ3lfZlk7Kgl0O0pblBNgUZRg4wHCZjsiRtVY1k0OOH0...
BELL-CVE-2025-38656
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2019-2865
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and...
VulnCheck KEV: CVE-2023-44467
langchainexperimental aka LangChain Experimental in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by palchain/base.py...
Linux Distros Unpatched Vulnerability : CVE-2020-28052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checki...
SAP NetWeaver Application Server for ABAP Cross-Site Scripting Vulnerability (CNVD-2025-21207)
SAP NetWeaver Application Server for ABAP is a powerful development and runtime platform that is at the heart of many basic SAP business applications. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server for ABAP. An attacker could exploit this vulnerability by...
CVE-2025-38521
creationtimestamp| type| source ---|---|--- 2025-08-16 11:03:07+00:00| seen| Telegram/AxdvAwgoFo8NoOiv12Q1WX0RStPYIIV95nLVE0mHCgSzX0E 2026-01-22 19:23:42+00:00| seen| Telegram/dDrS7jCx1-mbfF1VtTC0R8fbNPtLvry3cEYGmZ-V5HVE0...
CVE-2025-7778
creationtimestamp| type| source ---|---|--- 2025-08-15 09:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwgil7fvjt2s 2025-08-15 12:07:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwgsxga4472g...