Lucene search
+L

14664 matches found

RedHat Linux
RedHat Linux
•added 2025/08/05 3:18 a.m.•12 views

jq: jq has signed integer overflow in jv.c:jvp_array_write

A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory acces...

6.5CVSS6.4AI score0.0046EPSS
SaveExploits1References7
Packet Storm News
Packet Storm News
•added 2025/08/05 12:00 a.m.•20 views

Lightweight Fault Detection Architecture for NTT on FPGA

Post-Quantum Cryptographic PQC algorithms are mathematically secure and resistant to quantum attacks but can still leak sensitive information in hardware implementations due to natural faults or intentional fault injections. The intent fault injection in side-channel attacks reduces the reliabili...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/05 12:00 a.m.•25 views

Linux Distros Unpatched Vulnerability : CVE-2023-52603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN:...

7.8CVSS6.6AI score0.00291EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/05 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2022-49186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconticlkregistergates This code was using -1 to...

7.8CVSS6.8AI score0.00249EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/08/05 12:00 a.m.•12 views

PT-2025-33767

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A stack out-of-bounds write issue exists in the tc entry parsing within the mqprio module of the Linux kernel. The TCA MQPRIO TC ENTRY INDEX is validated using NLA POLICY MAXNLA U32, T...

7.8CVSS6.6AI score0.00176EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/04 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2023-53112

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/i915/sseu: fix maxsubslices array-index-out-of-bounds access It seems that commit...

7.1CVSS6.4AI score0.00204EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/08/02 8:22 p.m.•21 views

CVE-2014-125121

Array Networks vAPV version 8.3.2.17 and vxAG version 9.2.0.34 appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials or SSH private key and insecure permissions on a startup script. The devices ship with a default SSH login or a...

10CVSS6.9AI score0.01373EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2025/08/02 10:41 a.m.•160 views

Exploit for Relative Path Traversal in Articatech Artica_Proxy

LFI to RCE Exploit via Log Poisoning Python3 exploit for CVE...

7.5CVSS7.7AI score0.44579EPSS
SaveExploits5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/02 12:00 a.m.•3 views

CVE-2025-23278: Improper Validation of Array Index

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service...

7.1CVSS6.9AI score0.00192EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/31 3:15 p.m.•33 views

CVE-2014-125121

Array Networks vAPV version 8.3.2.17 and vxAG version 9.2.0.34 appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials or SSH private key and insecure permissions on a startup script. The devices ship with a default SSH login or a...

10CVSS0.01373EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/07/31 2:52 p.m.•30 views

CVE-2014-125121 Array Networks vAPV and vxAG Default Credential Privilege Escalation

Array Networks vAPV version 8.3.2.17 and vxAG version 9.2.0.34 appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials or SSH private key and insecure permissions on a startup script. The devices ship with a default SSH login or a...

10CVSS0.01373EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/07/31 2:52 p.m.•12 views

CVE-2014-125121 Array Networks vAPV and vxAG Default Credential Privilege Escalation

Array Networks vAPV version 8.3.2.17 and vxAG version 9.2.0.34 appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials or SSH private key and insecure permissions on a startup script. The devices ship with a default SSH login or a...

10CVSS8.6AI score0.01373EPSS
SaveExploits1References4
CVE
CVE
•added 2025/07/31 2:52 p.m.•47 views

CVE-2014-125121

CVE-2014-125121 affects Array Networks vAPV (v8.3.2.17) and vxAG (v9.2.0.34). The vulnerability arises from a combination of hardcoded SSH credentials (or SSH private key) and insecure permissions on a startup script, allowing remote authentication with limited privileges. An authenticated attack...

10CVSS8.6AI score0.01373EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•16 views

PT-2025-31541 · Undefined · Undefined

Array Networks vAPV version 8.3.2.17 and vxAG version 9.2.0.34 appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials or SSH private key and insecure permissions on a startup script. The devices ship with a default SSH login or a...

10CVSS7.1AI score0.01373EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•6 views

CVE-2014-125121: Use of Hard-coded Credentials

Array Networks vAPV version 8.3.2.17 and vxAG version 9.2.0.34 appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials or SSH private key and insecure permissions on a startup script. The devices ship with a default SSH login or a...

10CVSS8.7AI score0.01373EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•25 views

Array Networks vAPV and Array Networks vxAG security vulnerabilities

Array Networks vAPV and Array Networks vxAG are both products of Array Networks, Inc. of the U.S.A. Array Networks vAPV is a Virtual Application Delivery Controller.Array Networks vxAG is a Virtual Secure Access System. A security vulnerability exists in Array Networks vAPV version 8.3.2.17 and...

10CVSS8.3AI score0.01373EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•24 views

PT-2025-33772

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The software node does not specify a count of property entries, and the array is not null-terminated. This can lead to a fault in the downstream cs35l56 amplifier driver, as the node...

7.3CVSS6.8AI score0.00171EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/07/30 11:22 p.m.•16 views

SUSE CVE-2025-38407

In the Linux kernel, the following vulnerability has been resolved: riscv: cpuopssbi: Use static array for bootdata Since commit 6b9f29b81b15 "riscv: Enable pcpu page first chunk allocator", if NUMA is enabled, the page percpu allocator may be used on very sparse configurations, or when requested...

5.5CVSS5.8AI score0.00174EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/30 12:00 a.m.•22 views

Dell XtremIO log information leakage vulnerability

DELL XtremIO is an all-flash enterprise-class storage array from EMC, a Dell Technologies company, designed to enhance the performance of virtualization, database and analytics applications. DELL XtremIO suffers from a log information disclosure vulnerability that originates from the system...

8.8CVSS7.8AI score0.00146EPSS
SaveExploits0References1
osv_rlsa
osv_rlsa
•added 2025/07/29 1:38 p.m.•17 views

RLSA-2025:8246 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: wifi: rtw89: Fix array index mistake in rtw89stainfogetiter CVE-2024-43842 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relat...

7.3CVSS7.2AI score0.00218EPSS
SaveExploits0References2
Rows per page
Query Builder