Lucene search
K

8 matches found

OSV
OSV
added 2026/04/23 12:57 p.m.3 views

CLSA-2026-1776949031 flatpak: Fix of CVE-2026-34079

CVE-2026-34079: restrict cached-file removal to alphanumeric targets in flatpakswitchsymlinkandremove to prevent path-traversal unlink via a sandboxed-app-controlled symlink...

8.7CVSS5.8AI score0.00172EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/12/10 9:1 a.m.2 views

smb: client: fix potential UAF in smb2_close_cached_fid()

...

7CVSS7AI score0.00036EPSS
Exploits0
OSV
OSV
added 2025/12/09 4:17 p.m.1 views

UBUNTU-CVE-2025-40328

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2closecachedfid findorcreatecacheddir could grab a new reference after krefput had seen the refcount drop to zero but before cfidlistlock is acquired in smb2closecachedfid, leading to...

5.7AI score0.00036EPSS
Exploits0References22
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.1 views

PT-2025-49781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the SMB client, specifically in the smb2 close cached fid function. The find or create cached dir function could potentially acqui...

5.3AI score0.00036EPSS
Exploits0
OSV
OSV
added 2023/11/30 6:15 p.m.0 views

CVE-2023-6376

Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents...

7.5CVSS5.8AI score0.00974EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2016/05/23 12:0 a.m.17 views

Cisco WSA Multiple Vulnerabilities 05/16

Cisco WSA Software is prone to multiple vulnerabilities. CVE-2016-1380 A vulnerability that occurs when parsing an HTTP POST request with Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the...

7.8CVSS7.7AI score0.01094EPSS
Exploits0References4
CNVD
CNVD
added 2016/05/19 12:0 a.m.1 views

Cisco Web Security Appliance AsyncOS Denial of Service Vulnerability (CNVD-2016-03367)

Cisco Web Security Appliance WSA is a set of Web security appliances from the U.S. company Cisco Cisco. The appliance provides SaaS-based access control, real-time network reporting and tracking, and security policy development, etc. Cisco AsyncOS is a set of operating systems running on it. A...

7.8CVSS6.8AI score0.01094EPSS
Exploits0References1
exploitpack
exploitpack
added 2004/07/13 12:0 a.m.13 views

Mozilla Browser 0.91.x Cache File - Multiple Vulnerabilities

Mozilla Browser 0.91.x Cache File - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10709/info Mozilla Browser is reported prone to multiple vulnerabilities that could eventually allow for code execution on the local computer. These vulnerabilities do not represent a significan...

7.6AI score
Exploits0
Rows per page
Query Builder