Lucene search
+L

1330 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2022-3624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function rlbarpxmit of the file...

3.5CVSS4AI score0.00255EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-52890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rul...

8.1CVSS6.2AI score0.00195EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/25 4:15 p.m.11 views

AZL-65822 CVE-2025-38459 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clippush. syzbot reported the splat below. 0 This happens if we call ioctlATMARPMKIP more than once. During the first call, clipmkip sets clippush to vcc-push, and the second call copies ...

7.8CVSS6.8AI score0.00174EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/25 4:15 p.m.18 views

UBUNTU-CVE-2025-38459

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clippush. syzbot reported the splat below. 0 This happens if we call ioctlATMARPMKIP more than once. During the first call, clipmkip sets clippush to vcc-push, and the second call copies ...

7.8CVSS6.5AI score0.00174EPSS
SaveExploits0References42
NVD
NVD
added 2025/07/08 7:15 a.m.14 views

CVE-2025-41667

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

8.8CVSS0.00518EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/08 7:03 a.m.5 views

CVE-2025-41667 Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

8.8CVSS7.3AI score0.00518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/08 12:00 a.m.15 views

PT-2025-28351 · Phoenix Contact · Axc F 1152 +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device. Recommendations:...

8.8CVSS6.4AI score0.00518EPSS
SaveExploits0References4
Veracode
Veracode
added 2025/06/30 3:51 a.m.18 views

Security Filter Bypass

github.com/lxc/incus is vulnerable to security filter bypass. The vulnerability is due to incorrect generation of nftables rules when applying ACLs on devices connected to a bridge, which allows ARP spoofing and full spoofing of another VM/container on the same bridge...

8.1CVSS6.2AI score0.00195EPSS
SaveExploits0References4Affected Software3
OSV
OSV
added 2025/06/26 9:12 p.m.13 views

GHSA-P7FW-VJJM-2RWP Incus creates nftables rules that partially bypass security options

Summary When using an ACL on a device connected to a bridge, Incus generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP spoofing on the bridge and to fully spoof another VM/container on the...

8.1CVSS7.1AI score0.00195EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/06/26 9:12 p.m.16 views

Incus creates nftables rules that partially bypass security options

Summary When using an ACL on a device connected to a bridge, Incus generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP spoofing on the bridge and to fully spoof another VM/container on the...

8.1CVSS7.1AI score0.00195EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/06/25 5:15 p.m.15 views

CVE-2025-52890

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...

8.1CVSS0.00195EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/25 5:15 p.m.10 views

UBUNTU-CVE-2025-52890

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...

8.1CVSS6AI score0.00195EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/06/25 4:51 p.m.9 views

CVE-2025-52890 Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...

8.1CVSS7.2AI score0.00195EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/25 4:51 p.m.44 views

CVE-2025-52890

Incus CVE-2025-52890 affects the Incus system container/VM manager; versions 6.12 and 6.13 generate nftables rules when an ACL is used on a bridge-connected device, which partially bypasses security.mac_filtering, security.ipv4_filtering and security.ipv6_filtering. This can enable ARP spoofing o...

8.1CVSS7.2AI score0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/25 4:51 p.m.22 views

CVE-2025-52890 Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...

8.1CVSS0.00195EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/06/25 4:51 p.m.22 views

CVE-2025-52890

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...

8.1CVSS7.3AI score0.00195EPSS
SaveExploits0
OSV
OSV
added 2025/06/25 4:51 p.m.18 views

CVE-2025-52890 Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs

Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options security.macfiltering, security.ipv4filtering and security.ipv6filtering. This can lead to ARP...

8.1CVSS6.4AI score
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/25 12:00 a.m.9 views

Incus 安全漏洞

Incus is an LXC open source system container and virtual machine manager. A security vulnerability exists in Incus versions 6.12 and 6.13, which stems from a partial bypass of security options in the nftables rule and could lead to ARP spoofing...

8.1CVSS6AI score0.00195EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/06/25 12:00 a.m.21 views

PT-2025-26863

Name of the Vulnerable Software and Affected Versions: Incus versions 6.12 and 6.13 Description: Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, it generates nftables rules that partially bypass security options security.mac filtering,...

10CVSS6.8AI score0.42078EPSS
SaveExploits25References76
Packet Storm News
Packet Storm News
added 2025/06/23 12:00 a.m.16 views

Intelligent ARP Spoofing Detection Using Multi-Layered Machine Learning (ML) Techniques for IoT Networks

Address Resolution Protocol ARP spoofing remains a critical threat to IoT networks, enabling attackers to intercept, modify, or disrupt data transmission by exploiting ARP's lack of authentication. The decentralized and resource-constrained nature of IoT environments amplifies this vulnerability,...

6.9AI score
SaveExploits0
Rows per page
Query Builder