Lucene search
+L

2128 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out b...

7.8CVSS5.9AI score0.0016EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/08/13 2:49 a.m.12 views

kernel: drivers:md:fix a potential use-after-free bug

A use-after-free bug exists in the linux kernel such that in the line "raid5releasestripesh;" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines "if sh-batchhead && sh != sh-batchhead" resulting in a minor application crash...

7.8CVSS6.7AI score0.00215EPSS
SaveExploits0References5
Hacker One
Hacker One
added 2025/08/12 4:32 a.m.12 views

Bykea: Customer can cancel a individual booking in a batch, causing locking of partner.

The vulnerability allowed users to update the status of individual trips inside a batch, even though only batch-level status changes were intended. By cancelling the single trip inside a one-parcel batch, the batch was placed into an inconsistent state, causing the assigned partner to become stuc...

6.8AI score
SaveExploits0
Cvelist
Cvelist
added 2025/08/11 9:32 a.m.24 views

CVE-2025-8840 jshERP Endpoint deleteBatch improper authorization

A vulnerability was determined in jshERP up to 3.5. Affected is an unknown function of the file /jshERP-boot/user/deleteBatch of the component Endpoint. The manipulation of the argument ids leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclos...

5.5CVSS0.00429EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-7917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nfnetlinkrcvbatch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough...

5CVSS6.1AI score0.01507EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-21865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gtp: Suppress list corruption splat in gtpnetexitbatchrtnl. Brad Spengler reported the listd...

5.5CVSS5.9AI score0.00214EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2021-26932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of...

5.5CVSS6.3AI score0.00346EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2022-48939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf bat...

3.3CVSS5.4AI score0.00201EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/31 7:14 p.m.10 views

MAL-2025-6467 Malicious code in boto3-batch-utils (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/07/29 11:23 p.m.5 views

SUSE CVE-2025-38447

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out by David1, the batched unmap logic in trytounmapone may read past the end of a PTE table when a large folio's PTE mappings are not fully...

7.1CVSS6.2AI score0.0016EPSS
SaveExploits0References3
Gitee
Gitee
added 2025/07/27 3:29 a.m.105 views

Exploit for Use After Free in Microsoft

微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 DIR . 2019/06/02 02:11 DIR .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04 172,03...

10CVSS7AI score0.99999EPSS
SaveExploits125
OSV
OSV
added 2025/07/25 4:15 p.m.4 views

UBUNTU-CVE-2025-38447

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out by David1, the batched unmap logic in trytounmapone may read past the end of a PTE table when a large folio's PTE mappings are not fully...

7.8CVSS5.7AI score0.0016EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/07/25 3:27 p.m.8 views

CVE-2025-38447

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out by David1, the batched unmap logic in trytounmapone may read past the end of a PTE table when a large folio's PTE mappings are not fully...

7.1CVSS5.7AI score0.0016EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2025/07/25 3:27 p.m.7 views

CVE-2025-38447 mm/rmap: fix potential out-of-bounds page table access during batched unmap

In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out by David1, the batched unmap logic in trytounmapone may read past the end of a PTE table when a large folio's PTE mappings are not fully...

7.8CVSS6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/25 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a runtime warning in the truncatefoliobatchexceptionals function...

7.8CVSS6.2AI score0.00153EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/23 12:0 a.m.10 views

Redis 安全漏洞

Redis is an open source, ANSI C, web-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. with a multilingual API. A security vulnerability exists in Redis 7.4.3 and earlier versions, which stems from an improper memory allocation for multiple batch...

3.5CVSS6.5AI score0.00263EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.10 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from an uncleaned file attachment path in a batch imported JSONL file, which could cause a system administrator to read arbitrary system files v...

6.8CVSS6.3AI score0.0038EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/15 6:4 p.m.4 views

GHSA-JJWR-5CFH-7XWH DSpace is vulnerable to XML External Entity injection during archive imports

Impact Two related XXE injection possibilities have been discovered, impacting all versions of DSpace prior to 7.6.4, 8.2 and 9.1. 1. External entities are not disabled when parsing XML files during import of an archive in Simple Archive Format, either from command-line ./dspace import command or...

6.9CVSS6AI score0.00371EPSS
SaveExploits0References9
OSV
OSV
added 2025/07/15 2:44 p.m.6 views

CVE-2025-53621 DSpace vulnerable to XML External Entity (XXE) injection in import via Simple Archive Format (SAF) or import from external sources

DSpace open source software is a repository application which provides durable access to digital resources. Two related XML External Entity XXE injection possibilities impact all versions of DSpace prior to 7.6.4, 8.2, and 9.1. External entities are not disabled when parsing XML files during impo...

6.9CVSS7AI score
SaveExploits0References9
Packet Storm News
Packet Storm News
added 2025/07/13 12:0 a.m.6 views

Efficient Private Inference Based on Helper-Assisted Malicious Security Dishonest Majority MPC

Private inference based on Secure Multi-Party Computation MPC addresses data privacy risks in Machine Learning as a Service MLaaS. However, existing MPC-based private inference frameworks focuses on semi-honest or honest majority models, whose threat models are overly idealistic, while malicious...

6.8AI score
SaveExploits0
Rows per page
Query Builder