Lucene search
+L

451 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-61780

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in...

5.8CVSS6.2AI score0.00553EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2023-53633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in mapuserpages If getuserpagesfast allocates some pages but not as...

5.5CVSS5.3AI score0.0018EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/10/11 11:21 p.m.•13 views

SUSE CVE-2025-61780

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.8CVSS6.4AI score0.00553EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/10/10 5:31 p.m.•14 views

Rack has a Possible Information Disclosure Vulnerability

Summary A possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to miscommunicate with the proxy and trigger unintended internal requests, potentially...

5.8CVSS6.4AI score0.00553EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2025/10/10 5:31 p.m.•10 views

GHSA-R657-RXJC-J557 Rack has a Possible Information Disclosure Vulnerability

Summary A possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to miscommunicate with the proxy and trigger unintended internal requests, potentially...

5.8CVSS6.4AI score0.00553EPSS
SaveExploits0References7
OSV
OSV
•added 2025/10/10 5:15 p.m.•11 views

DEBIAN-CVE-2025-61780

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.3CVSS5.5AI score0.00553EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/10 5:15 p.m.•23 views

CVE-2025-61780

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.8CVSS0.00553EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/10 5:15 p.m.•13 views

UBUNTU-CVE-2025-61780

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.8CVSS6.8AI score0.00553EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/10 4:53 p.m.•13 views

EUVD-2025-33749

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.8CVSS5.8AI score0.00553EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/10 4:53 p.m.•8 views

CVE-2025-61780 Rack has Possible Information Disclosure Vulnerability

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.8CVSS5.9AI score0.00553EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•14 views

PT-2025-41580

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.20 Rack versions prior to 3.1.18 Rack versions prior to 3.2.3 Description Rack is a modular Ruby web server interface. A potential information disclosure issue existed in Rack::Sendfile when operating behind a proxy...

5.8CVSS6.7AI score0.00553EPSS
SaveExploits0References52
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•1 views

CVE-2025-61780: Exposure of Sensitive Information to an Unauthorized Actor

Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, a possible information disclosure vulnerability existed in Rack::Sendfile when running behind a proxy that supports x-sendfile headers such as Nginx. Specially crafted headers could cause Rack::Sendfile to...

5.8CVSS6AI score0.00553EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2023-53493

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decodemessage Copy the bounds checking from...

8.4CVSS6.2AI score0.00155EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/10/07 11:47 p.m.•9 views

SUSE CVE-2023-53633

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in mapuserpages If getuserpagesfast allocates some pages but not as many as we wanted, then the current code leaks those pages. Call putpage on the pages before returning...

3.3CVSS6.7AI score0.0018EPSS
SaveExploits0References15
EUVD
EUVD
•added 2025/10/07 3:19 p.m.•10 views

EUVD-2025-32792

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in mapuserpages If getuserpagesfast allocates some pages but not as many as we wanted, then the current code leaks those pages. Call putpage on the pages before returning...

6.2AI score0.0018EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/07 3:19 p.m.•20 views

CVE-2023-53633 accel/qaic: Fix a leak in map_user_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in mapuserpages If getuserpagesfast allocates some pages but not as many as we wanted, then the current code leaks those pages. Call putpage on the pages before returning...

0.0018EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/10/07 3:19 p.m.•13 views

CVE-2023-53633

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in mapuserpages If getuserpagesfast allocates some pages but not as many as we wanted, then the current code leaks those pages. Call putpage on the pages before returning...

5.5CVSS5.4AI score0.0018EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-7243

Malware in sbrugna...

9.8CVSS9.2AI score0.01183EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-20678

Malware in sbrugna...

9.8CVSS9.2AI score0.03004EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/07 12:00 a.m.•9 views

PT-2025-46655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s accel/qaic component related to bootlog initialization ordering. Specifically, resources required to process bootlog data from a device were being...

5.5CVSS7.7AI score0.09567EPSS
SaveExploits7References398
Rows per page
Query Builder