Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-12889

Malicious code in bioql PyPI...

6.7AI score0.00078EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-53052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix use-after-free bug in refreshcacheworker The UAF bug occurred because we were putting DFS root sessions in cifsumount while DFS cache refresher was...

7.8CVSS6.7AI score0.00078EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/05/03 2:51 a.m.1 views

SUSE CVE-2023-53052

In the Linux kernel, the following vulnerability has been resolved: cifs: fix use-after-free bug in refreshcacheworker The UAF bug occurred because we were putting DFS root sessions in cifsumount while DFS cache refresher was being executed. Make DFS root sessions have same lifetime as DFS tcons ...

7CVSS6.6AI score0.00078EPSS
Exploits0References12
CVE
CVE
added 2025/05/02 3:55 p.m.110 views

CVE-2023-53052

CVE-2023-53052 is a Linux kernel vulnerability in the CIFS/DFS codebase, where a use-after-free (UAF) bug occurred when DFS root sessions were kept alive in cifs_umount() during the DFS cache refresher. The fix makes DFS root sessions have the same lifetime as DFS tcons to prevent IPCs from acces...

7.8CVSS6.5AI score0.00078EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/05/01 3:16 p.m.3 views

DEBIAN-CVE-2022-49882

In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfntopfncache Reject kvmgpccheck and kvmgpcrefresh if the cache is inactive. Not checking the active flag during refresh is particularly egregious, as KVM can end up with a vali...

7.8CVSS5.5AI score0.00078EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/01/15 3:48 a.m.1 views

SUSE CVE-2025-22149

JWK Set JSON Web Key Set is a JWK and JWK Set Go implementation. Prior to 0.6.0, the project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use...

2.1CVSS6.6AI score0.00062EPSS
Exploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2025/01/09 12:0 a.m.6 views

JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh

The project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal fr...

2.1CVSS7.2AI score0.00062EPSS
Exploits0References7Affected Software1
Citrix
Citrix
added 2023/08/20 12:0 a.m.4 views

WEM Service : Unable to connect to the Citrix WEM cloud connectors

Unable to refresh the cache of the WEM agent which uses proxy for Internet access Cache refresh is possible on the WEM agent with direct Internet access...

7.1AI score
Exploits0
OSV
OSV
added 2022/10/18 2:15 p.m.1 views

CVE-2020-15853

supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time...

5.3CVSS5.8AI score0.00255EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/18 12:0 a.m.5 views

PT-2022-8578 · Unknown · Supybot-Fedora

Name of the Vulnerable Software and Affected Versions: supybot-fedora affected versions not specified Description: The issue is related to the 'refresh' command in supybot-fedora, which refreshes the cache of all users from FAS. This process takes a significant amount of time to complete, causing...

5.3CVSS5.1AI score0.00255EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.15 views

CVE-2020-15853

supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time...

7.2AI score0.00255EPSS
Exploits0References1
Metasploit
Metasploit
added 2021/12/20 5:42 p.m.237 views

Wordpress Popular Posts Authenticated RCE

This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not resolve to a reserved address 192/172/127/10. The server must also respond to a HEAD request for the payload, prior to getting a GET request. This exploit...

8.8CVSS7.3AI score0.82414EPSS
Exploits5
Citrix
Citrix
added 2017/10/06 12:0 a.m.6 views

WEM Agent Connection error: "Broker Server Name or Broker Port Error"

WEM Agent fails to connect to the WEM Broker and shows the following error when manually refreshing the WEM cache using this command: AgentCacheUtility.exe -refreshcache: "Broker Server Name or Broker Port Error"...

7.1AI score
Exploits0
CVE
CVE
added 2000/02/04 5:0 a.m.47 views

CVE-1999-0993

The CVE-1999-0993 entry concerns Microsoft Exchange 5.5 where changes to ACLs do not take effect until the directory store cache is refreshed. Connected PT-1999-1512 confirms affected software: Microsoft Exchange 5.5, with the behavior that ACL modifications only apply after refreshing the direct...

7.5CVSS6.8AI score0.0867EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 1999/12/13 12:0 a.m.2 views

PT-1999-1512 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange version 5.5 Description: The issue concerns modifications to ACLs Access Control Lists in Microsoft Exchange. These modifications do not take effect until the directory store cache is refreshed. Recommendations: For Microso...

7.5CVSS6.5AI score0.0867EPSS
Exploits0References3
Rows per page
Query Builder