Lucene search
+L

11587 matches found

UbuntuCve
UbuntuCve
added 2026/05/08 3:16 p.m.18 views

CVE-2026-43408

In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing cephpathinfo initializers cephmdscbuildpath must be called with a zero-initialized cephpathinfo parameter, or else the following cephmdscfreepathinfo may crash. Example crash on Linux 6.18.12:...

7.8CVSS6.5AI score0.00129EPSS
SaveExploits0References20
Cvelist
Cvelist
added 2026/05/08 2:21 p.m.44 views

CVE-2026-43419 ceph: fix memory leaks in ceph_mdsc_build_path()

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in cephmdscbuildpath Add putname calls to error code paths that did not free the "path" pointer obtained by getname. If ownership of this pointer is not passed to the caller via pathinfo.path, the function...

0.00122EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/08 2:21 p.m.49 views

CVE-2026-43408 ceph: add a bunch of missing ceph_path_info initializers

In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing cephpathinfo initializers cephmdscbuildpath must be called with a zero-initialized cephpathinfo parameter, or else the following cephmdscfreepathinfo may crash. Example crash on Linux 6.18.12:...

7.8CVSS0.00129EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/08 2:21 p.m.54 views

CVE-2026-43408

CVE-2026-43408 concerns the Linux kernel Ceph path handling: a missing zero-initialization of ceph_path_info before ceph_mdsc_build_path() calls can lead to crashes when ceph_mdsc_free_path_info() is invoked on error paths. Multiple code paths lacked proper initializers; the recommended fix is to...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:21 p.m.11 views

CVE-2026-43408

In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing cephpathinfo initializers cephmdscbuildpath must be called with a zero-initialized cephpathinfo parameter, or else the following cephmdscfreepathinfo may crash. Example crash on Linux 6.18.12:...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/05/08 2:21 p.m.12 views

CVE-2026-43408 ceph: add a bunch of missing ceph_path_info initializers

In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing cephpathinfo initializers cephmdscbuildpath must be called with a zero-initialized cephpathinfo parameter, or else the following cephmdscfreepathinfo may crash. Example crash on Linux 6.18.12:...

7.8CVSS6.5AI score
SaveExploits0References7
NVD
NVD
added 2026/05/08 10:16 a.m.46 views

CVE-2026-6213

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker...

10CVSS0.00326EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/08 9:04 a.m.63 views

CVE-2026-6213 Remote Spark SparkView RCE

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker...

10CVSS0.00326EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 9:04 a.m.14 views

CVE-2026-6213

A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on the server side. Depending on implementation the vulnerability can be exploited by an unauthenticated attacker...

10CVSS6.3AI score0.00326EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/08 9:04 a.m.45 views

CVE-2026-6213

The CVE concerns Remote Spark SparkView (before build 1122). The issue allows bypassing the local connection check and may lead to arbitrary code execution as root on the server. The vulnerability appears to be unauthenticated depending on implementation, with a critical CVSS score implied by the...

10CVSS6.3AI score0.00326EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/08 6:32 a.m.16 views

EUVD-2024-55569

A Command Injection issue in the payload build page in BYOB Build Your Own Botnet 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py...

7.3CVSS6.1AI score0.03891EPSS
SaveExploits3References4
NVD
NVD
added 2026/05/08 6:16 a.m.36 views

CVE-2024-45257

A Command Injection issue in the payload build page in BYOB Build Your Own Botnet 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py...

7.3CVSS0.03891EPSS
SaveExploits3References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 12:00 a.m.40 views

CVE-2024-45257

A Command Injection issue in the payload build page in BYOB Build Your Own Botnet 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py...

7.6AI score0.03891EPSS
SaveExploits3References5
CVE
CVE
added 2026/05/08 12:00 a.m.77 views

CVE-2024-45257

CVE-2024-45257 concerns BYOB (Build Your Own Botnet) 2.0. A command injection vulnerability exists on the payload build page, exploitable via a crafted build parameter that triggers arbitrary command execution on the server (root cause in core/generators.py). Public materials (including Metasploi...

7.3CVSS6.1AI score0.03891EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2026/05/08 12:00 a.m.242 views

CVE-2024-45257

A Command Injection issue in the payload build page in BYOB Build Your Own Botnet 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter. This occurs in freeze in core/generators.py...

0.03891EPSS
SaveExploits3References3
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.21 views

Remote Spark SparkView 安全漏洞

Remote Spark SparkView is a browser-based client software developed by Remote Spark, enabling remote desktop access and terminal connections. Versions of Remote Spark SparkView prior to build 1122 contained security vulnerabilities. These vulnerabilities stemmed from bypassing local connection...

10CVSS6.2AI score0.00326EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.20 views

PT-2026-39069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Ceph component of the Linux kernel where the ceph mdsc build path function is called without a zero-initialized ceph path info parameter. Because ceph mdsc build pat...

7.8CVSS7.2AI score0.00129EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.62 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the cephmdscbuildpath function not releasing the path pointer obtained through getname, resulting...

5.5CVSS5.8AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.26 views

PT-2026-39212

Name of the Vulnerable Software and Affected Versions Postiz versions prior to commit da44801 Description A Pwn Request issue in the Build and Publish PR Docker Image workflow located in '.github/workflows/pr-docker-build.yml' allows unauthenticated users to execute arbitrary code during the Dock...

10CVSS6.2AI score0.00504EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.38 views

PT-2026-38902

Name of the Vulnerable Software and Affected Versions Remote Spark SparkView versions prior to build 1122 Description An issue in the local connection check allows an attacker to bypass security restrictions and achieve arbitrary code execution as root on the server side. Depending on the...

10CVSS6.3AI score0.00326EPSS
SaveExploits0References4
Rows per page
Query Builder