Lucene search
+L

6 matches found

Redos
Redos
•added 2026/10/05 12:00 a.m.•13 views

ROS-20261005-73-0125

The vulnerability of the cifssetcifscreds function in the fs/smb/client/connect.c module of the Smb file system in Linux kernel is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.5AI score0.00125EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/25 12:00 a.m.•15 views

Smb File System Heap Buffer Overflow DoS

The vulnerability of the cifssetcifscreds function in the fs/smb/client/connect.c module of the Smb file system in Linux kernel is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.5AI score0.00125EPSS
SaveExploits0References12Affected Software3
osv_azl
osv_azl
•added 2026/03/25 11:16 a.m.•16 views

AZL-80643 CVE-2026-23303 affecting package kernel for versions less than 6.6.130.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

5.5CVSS6AI score0.00125EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/25 10:26 a.m.•13 views

CVE-2026-23303

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

6AI score0.00125EPSS
SaveExploits0References9Affected Software1
osv_cve
osv_cve
•added 2026/03/25 10:26 a.m.•23 views

CVE-2026-23303 smb: client: Don't log plaintext credentials in cifs_set_cifscreds

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

5.7AI score
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•5 views

CVE-2026-23303: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: Don't log plaintext credentials in cifssetcifscreds When debug logging is enabled, cifssetcifscreds logs the key payload and exposes the plaintext username and password. Remove the debug log to avoid exposing...

5.5CVSS5.9AI score0.00125EPSS
SaveExploits0References9
Rows per page
Query Builder