Lucene search
+L

19915 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/19 12:00 a.m.11 views

The vulnerability of the btmtk_process_coredump() function in the drivers/bluetooth/btmtk.c Bluetooth driver module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btmtkprocesscoredump function in the drivers/bluetooth/btmtk.c Bluetooth driver module of the Linux operating system is related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

5.5CVSS5.6AI score0.00222EPSS
SaveExploits0References13Affected Software3
OSV
OSV
added 2025/03/18 5:43 p.m.24 views

CLSA-2025-1742319829 Fix of 27 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neighperiodicwork CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211getstation CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma...

8.8CVSS7AI score0.00811EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/15 12:00 a.m.12 views

Fedora 41 : linux-firmware (2025-7f56eb37a0)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7f56eb37a0 advisory. Update to upstream 20250311: amdgpu: many firmware updates qcom: Update gpu firmwares for qcs8300 chipset add firmware for qat420xx devices amdgpu:...

7.9CVSS6.1AI score0.00493EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:00 a.m.16 views

The vulnerability of the BT Controller component of Qualcomm’s embedded software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the BT Controller component in the microprogramming software of Qualcomm’s integrated chips is related to data encryption errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

8.5CVSS5.5AI score0.00145EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/03/13 3:46 p.m.4 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-26708: mptcp: fix inconsistent state on fastopen race bsc1222672. CVE-2024-40980: dropmonitor: replace spinlock by rawspinlock bsc1227937. CVE-2024-44974:...

8.6CVSS8.2AI score0.00757EPSS
SaveExploits1References398
Ubuntu
Ubuntu
added 2025/03/13 10:35 a.m.31 views

USN-7344-2: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

10CVSS7.9AI score0.03395EPSS
SaveExploits2
OSV
OSV
added 2025/03/13 9:40 a.m.19 views

USN-7332-3 linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - GPIO subsystem; - GPU drivers; - Media drivers; - Network drivers;...

9.8CVSS6.7AI score0.03395EPSS
SaveExploits3References37
Microsoft CVE
Microsoft CVE
added 2025/03/13 7:00 a.m.6 views

Bluetooth: btmtk: avoid UAF in btmtk_process_coredump

...

8.8CVSS7.8AI score0.0031EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/03/13 7:00 a.m.9 views

Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()

...

7.8CVSS7.2AI score0.00223EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/03/13 7:00 a.m.11 views

Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating

...

7.8CVSS7.4AI score0.00227EPSS
SaveExploits0
SUSE Linux
SUSE Linux
added 2025/03/12 1:00 p.m.9 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-26708: mptcp: fix inconsistent state on fastopen race bsc1222672. CVE-2024-40980: dropmonitor: replace spinlock by rawspinlock bsc1227937. CVE-2024-4497...

8.6CVSS8.2AI score0.00757EPSS
SaveExploits1References444
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.12 views

PT-2025-11058 · Google · Android

Name of the Vulnerable Software and Affected Versions: avdtp and avctp channels affected versions not specified Description: A logic error in the code may allow avdtp and avctp channels to be unencrypted. This could lead to local escalation of privilege, requiring User execution privileges. User...

7.8CVSS7.2AI score0.00096EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.16 views

PT-2025-11062 · Google · Android

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software contains potential out-of-bounds write issues stemming from a use-after-free condition. Successful exploitation of this issue could lead to remote code execution over Bluetooth when...

8.8CVSS7.4AI score0.00217EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.11 views

PT-2025-11050 · Google · Android

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: A memory corruption issue exists due to a use-after-free condition in the btif hh hsdata rpt copy cb function within bta hh.cc. This could allow for local privilege escalation over...

8CVSS9.5AI score0.00194EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.4 views

PT-2025-11074 · Google · Android

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: A use-after-free issue exists in the process service attr rsp function within sdp discovery.cc due to a logic error in the code. This could lead to remote code execution without requiring...

8.8CVSS7.2AI score0.00168EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.13 views

PT-2025-11051

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The generateFileInfo function within BluetoothOppSendFileInfo.java may allow for cross-user media disclosure due to a confused deputy issue. This could result in local information disclosur...

5.5CVSS5.6AI score0.0009EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/11 4:46 p.m.21 views

USN-7332-2 linux-kvm vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

9.8CVSS7AI score0.03395EPSS
SaveExploits3References38
Ubuntu
Ubuntu
added 2025/03/11 4:46 p.m.33 views

USN-7332-2: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

9.8CVSS7.9AI score0.03395EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2025/03/11 4:00 p.m.25 views

USN-7344-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

10CVSS7.9AI score0.03395EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2025/03/11 3:43 p.m.33 views

USN-7342-1: Linux kernel vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Several security issues were discovered in the Linux kerne...

10CVSS7.5AI score0.03395EPSS
SaveExploits2
Rows per page
Query Builder