Lucene search
+L

34018 matches found

NVD
NVD
added 2025/10/15 2:15 p.m.17 views

CVE-2025-53856

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS0.00348EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/15 2:15 p.m.22 views

CVE-2025-53856

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS5.8AI score0.00348EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/15 1:55 p.m.6 views

CVE-2025-53856 TMM vulnerability

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS6.4AI score0.00348EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/15 1:55 p.m.20 views

CVE-2025-53856 TMM vulnerability

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS0.00348EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/15 1:55 p.m.39 views

CVE-2025-53856

CVE-2025-53856 (TMM ePVA DoS) : The vulnerability affects BIG-IP when the embedded ePVA feature is used by a NAT/SNAT/virtual server and the Auto Last Hop setting is disabled, allowing undisclosed traffic to terminate the Traffic Management Microkernel (TMM) and cause DoS. A remote, unauthenticat...

8.7CVSS6.4AI score0.00348EPSS
SaveExploits0References1Affected Software21
RedhatCVE
RedhatCVE
added 2025/10/15 12:42 p.m.8 views

CVE-2025-11718

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144...

6.5CVSS5.8AI score0.00211EPSS
SaveExploits0References1
Circl
Circl
added 2025/10/15 11:35 a.m.9 views

GHSA-5RRX-JJJQ-Q2R5

creationtimestamp| type| source ---|---|--- 2025-10-15 11:35:09+00:00| seen| https://bsky.app/profile/appsecfeed.bsky.social/post/3m3a5mcs3go2d 2025-10-24 11:40:04+00:00| seen| https://gist.github.com/dhmosfunk/0b74940802f1c0e6b4e39101b301072c...

5.3AI score
SaveExploits0References2
OSV
OSV
added 2025/10/15 7:58 a.m.8 views

CVE-2025-39992 mm: swap: check for stable address space before operating on the VMA

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

6.2AI score
SaveExploits0References7
CVE
CVE
added 2025/10/15 7:56 a.m.51 views

CVE-2025-39982

CVE-2025-39982: Linux kernel Bluetooth subsystem use-after-free in hci_acl_create_conn_sync (and related paths like hci_le_create_conn_sync) has been fixed. The issue occurred when a connection in BT_OPEN state pending command submission could be freed, leading to a use-after-free on the connecti...

8.8CVSS6.2AI score0.00282EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/10/15 12:31 a.m.29 views

kernel: bpf: Don't use tnum_range on array range checking for poke descriptors

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnumrange on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-bounds in...

7.8CVSS6.8AI score0.0026EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/15 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check for address space stability, which could lead to a null pointer dereference...

6AI score0.00201EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/15 12:00 a.m.15 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An elevation of privilege vulnerability exists in the BIG-IP's iControl REST and TMOS Shell tmsh modules. The vulnerability...

9.1CVSS7.5AI score0.00394EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/15 12:00 a.m.14 views

PT-2025-42346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A validation vulnerability exists in an undisclosed URL within the Configuration utility. The vulnerability concerns an input validation issue. Recommendations ...

8.5CVSS6.5AI score0.00373EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/15 12:00 a.m.14 views

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 Corporation. A security vulnerability exists in F5 BIG-IP, which originates from a bd process that may repeatedly terminate when th...

8.7CVSS6.5AI score0.00348EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/15 12:00 a.m.14 views

Cisco IOS Software Industrial Ethernet Switch Device Manager DoS (cisco-sa-ios-invalid-url-dos-Nvxszf6u)

This vulnerability occurs due to improper input validation in the device’s HTTP request handling. An attacker could exploit it by sending a specially crafted URL to the web interface, causing the device to crash and reload. Successful exploitation results in a denial-of-service DoS condition,...

7.7CVSS5.5AI score0.00388EPSS
SaveExploits0References4
Circl
Circl
added 2025/10/14 7:47 p.m.4 views

GHSA-QGJ3-F9GJ-98V9

creationtimestamp| type| source ---|---|--- 2025-10-14 19:47:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115374244887228575...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/14 7:46 p.m.28 views

CVE-2025-62242

Insecure Direct Object Reference IDOR vulnerability with account addresses in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to from one account to view addresses fr...

5.3CVSS6.8AI score0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/14 5:00 p.m.17 views

CVE-2025-59295 Windows URL Parsing Remote Code Execution Vulnerability

...

8.8CVSS0.01916EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2025/10/14 4:25 p.m.37 views

arkadiyt-projects: DNS Rebinding Attack

Hi, there is a DNS rebinding vulnerability in your SSRF filter. F4891755 You validate the hostname's IP address, but then pass the hostname to Net::HTTP.start, which does its own DNS lookup. An attacker can control a DNS server that returns a safe public IP during validation, then returns 127.0.0...

6.7AI score
SaveExploits0
Circl
Circl
added 2025/10/14 4:03 p.m.21 views

CVE-2025-59282

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:23:53+00:00| seen|...

7CVSS8.5AI score0.0061EPSS
SaveExploits0References7
Rows per page
Query Builder