Lucene search
+L

3366 matches found

Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•1 views

PT-2022-28596

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.230 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•2 views

PT-2022-28798

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.1...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•4 views

PT-2022-28658

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.101 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•2 views

PT-2022-28619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to an array index nospec in vt setactivate. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.18...

5.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2022/02/25 12:00 a.m.•54 views

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1227)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with...

7.8CVSS6.4AI score0.06902EPSS
SaveExploits2References9
Tenable Nessus
Tenable Nessus
•added 2022/02/25 12:00 a.m.•82 views

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1243)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid...

7.8CVSS6.7AI score0.00867EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•47 views

PT-2022-2366 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.12 Description: The issue is related to the Linux kernel's USB gadget driver, specifically in the udc-xilinx.c file. It involves an array index that is not properly validated, potentially allowing a remote...

10CVSS7AI score0.6777EPSS
SaveExploits202References1110
attackerkb
attackerkb
•added 2022/02/16 8:15 p.m.•13 views

CVE-2022-25258

An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests ones with a large array index and ones associated with NULL function pointer retrieval. Memory corruption might occur...

4.9CVSS6.8AI score0.0092EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2022/02/07 12:00 a.m.•43 views

Siemens Null Pointer Dereference in Wind River VxWorks (CVE-2019-12259)

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing. - Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There...

7.5CVSS8.5AI score0.15882EPSS
SaveExploits0References14
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•36 views

Mageia: Security Advisory (MGASA-2014-0330)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.37233EPSS
SaveExploits23References16
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•40 views

Mageia: Security Advisory (MGASA-2014-0316)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.9AI score0.05794EPSS
SaveExploits5References7
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•36 views

Mageia: Security Advisory (MGASA-2021-0507)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.9AI score0.57853EPSS
SaveExploits5References6
Tenable Nessus
Tenable Nessus
•added 2022/01/28 12:00 a.m.•63 views

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-1010)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - net/netfilter/nfconntrackstandalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes...

7.9CVSS7AI score0.06902EPSS
SaveExploits5References12
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•34 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•35 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•32 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01443EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•28 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01443EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•26 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.02621EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•35 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

6.5CVSS3.9AI score0.01443EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/01/21 12:00 a.m.•31 views

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

9.8CVSS7.6AI score0.03193EPSS
SaveExploits0References1
Rows per page
Query Builder