Lucene search
+L

14792 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/05 12:00 a.m.6 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989888 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bondsetupbyslave Commit 9eed321cde22 net: lapbether: only support...

5.5CVSS5.9AI score0.00242EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2025/11/04 2:00 p.m.18 views

Microsoft Teams Bugs Let Attackers Impersonate Colleagues and Edit Messages Unnoticed

Cybersecurity researchers have disclosed details of four security flaws in Microsoft Teams that could have exposed users to serious impersonation and social engineering attacks. The vulnerabilities "allowed attackers to manipulate conversations, impersonate colleagues, and exploit notifications,"...

6.5CVSS6.7AI score0.16084EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2025/11/04 12:00 a.m.24 views

Create Self-Improving AI Agents Using Spring AI Recursive Advisors

The Spring AI ChatClient offers a fluent API for communicating with an AI model. The fluent API provides methods for building the constituent parts of a prompt that gets passed to the AI model as input. Advisors are a key part of the fluent API that intercept, modify, and enhance AI-driven...

7.4AI score
SaveExploits0
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.5 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed a bug caused by a preallocation collision. When the user space uses AFRXRPC to provide a server, it must pre-allocate incoming calls and assign them call IDs that will be used for recvmsg and sendmsg calls. The...

5.5CVSS6AI score0.00148EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.8 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the race condition involving completed calls. When a call receives an event such as incoming data, the call is placed on the socket’s queue. A thread that is processing recvmsg can be awakened to process this event...

7.5CVSS5.6AI score0.00263EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.3 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flushing delayed SKBs while releasing RXE resources When SKB packets are sent out, they still depend on rxe resources, such as QP and sk. These resources are released when the SKB packets are destroyed. However, if thes...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2025/10/31 1:10 a.m.16 views

ksmbd: fix recursive locking in RPC handle list access

...

7.5CVSS7AI score0.00261EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/30 1:22 p.m.29 views

CVE-2025-11587

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with...

4.3CVSS5AI score0.00219EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/30 12:31 p.m.9 views

EUVD-2025-36975

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifssbtlink Fix three refcount inconsistency issues related to cifssbtlink. Comments for cifssbtlink state that cifsputtlink needs to be called after successful calls to cifssbtlink. Three calls...

6AI score0.00193EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/30 12:31 p.m.10 views

EUVD-2025-36988

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

5.8AI score0.00261EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/30 9:47 a.m.44 views

CVE-2025-40090

Summary (CVE-2025-40090): A race condition in ksmbd RPC handling on Linux kernels caused deadlocks when opening named pipes. The root cause is ksmbd_session_rpc_method attempting to take the same sess->rpc_lock that is already held by ksmbd_session_rpc_open (down_write) while ksmbd_session_rpc...

7.5CVSS6AI score0.00261EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
added 2025/10/30 9:47 a.m.6 views

CVE-2025-40090

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 "ksmbd: Fix race condition in RPC handle list access", ksmbdsessionrpcmethod attempts to lock sess-rpclock. This causes hung connections / tasks wh...

5.2AI score0.00261EPSS
SaveExploits0References6Affected Software1
Fedora
Fedora
added 2025/10/30 4:36 a.m.12 views

[SECURITY] Fedora 42 Update: qt6-qtgrpc-6.9.3-1.fc42

Protocol Buffers Protobuf is a cross-platform data format used to serialize structured data. gRPC provides a remote procedure call framework based on Protobuf. Qt provides tooling and classes to use these technologies...

9.4CVSS7.1AI score0.00219EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a premature call to devlinkfree in the ixgberemove function, which could lead to reuse after release...

5.8AI score0.00172EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2025/10/30 12:00 a.m.12 views

VulnCheck KEV: CVE-2023-7325

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery SSRF vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix...

9.3CVSS5.9AI score0.00378EPSS
SaveIn wildExploits0References12
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.18 views

Anheng Mingyu Operations and Maintenance Audit and Risk Control System 安全漏洞

Anheng Mingyu Operations and Maintenance Audit and Risk Control System is an operations and maintenance security auditing, risk monitoring and compliance control platform from Anheng, China. A security vulnerability exists in Anheng Mingyu Operations and Maintenance Audit and Risk Control System...

9.3CVSS6.6AI score0.00378EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/30 12:00 a.m.10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a recursive lockup during RPC handle list access, which could lead to connection hangs...

5.5CVSS6AI score0.00261EPSS
SaveExploits0References4
Virtuozzo
Virtuozzo
added 2025/10/30 12:00 a.m.29 views

Virtuozzo Hybrid Infrastructure 7.0 Hotfix 4 (7.0.0-269)

This update provides stability fixes. Vulnerability id: VSTOR-106269, VSTOR-108984, VSTOR-116630 Stability fixes for the storage service. Vulnerability id: VSTOR-111693 A stability fix for QEMU. Vulnerability id: VSTOR-116184 kRPC failed to connect to certain chunk services. Vulnerability id:...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/29 3:31 p.m.14 views

EUVD-2025-36639

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with...

4.3CVSS4.6AI score0.00219EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/29 3:31 p.m.15 views

EUVD-2025-36640

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

4.3CVSS4.6AI score0.00251EPSS
SaveExploits0References8
Rows per page
Query Builder