Lucene search
+L

10434 matches found

CNNVD
CNNVD
added 2025/12/09 12:00 a.m.12 views

MailEnable 跨站脚本漏洞

MailEnable is a commercial email server software designed for Windows operating systems that provides end-to-end email hosting and collaboration solutions. MailEnable suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied da...

6.1CVSS5.7AI score0.00395EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.11 views

PT-2025-50006

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in opicron Image Cleanup image-cleanup allows Retrieve Embedded Sensitive Data.This issue affects Image Cleanup: from n/a through = 1.9.2...

6.9AI score0.00285EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in ext4orphancleanup...

8.7AI score0.00209EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

Robocode 安全漏洞

Robocode is an open source programming game by Robocode. A security vulnerability exists in Robocode version 1.9.3.6, which stems from insufficient file path cleanup and could lead to arbitrary file deletion...

10CVSS6.5AI score0.01074EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-53856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: overlay: Call ofchangesetinit early When ofoverlayfdtapply fails, the changeset may be partially applied, and the caller is still expected to call...

5.3AI score0.00227EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.11 views

PT-2025-49700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the ocxl module. Specifically, a potential name leak can occur within the ocxl file register afu function. If the device register function...

7.8CVSS6.8AI score0.00954EPSS
SaveExploits2References896
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-50673

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix use-after-free in ext4orphancleanup I caught a issue as follows: ================================================================== BUG: KASAN:...

7.8CVSS6.7AI score0.00209EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.8 views

WordPress plugin Image Cleanup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.3AI score0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.10 views

PT-2025-50005

Missing Authorization vulnerability in opicron Image Cleanup image-cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Cleanup: from n/a through = 1.9.2...

7AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.21 views

PT-2025-49702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to RDMA/rxe functionality. Specifically, a potential NULL pointer dereference can occur within the rxe qp init req function when rxe queue init...

7.8CVSS7.2AI score0.00954EPSS
SaveExploits2References918
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.37 views

PT-2025-49626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the hpsa init one function within the SCSI subsystem of the Linux kernel. The hpda alloc ctlr info function allocates memory for a controller information structur...

7.8CVSS6.2AI score0.00954EPSS
SaveExploits2References899
OSV
OSV
added 2025/12/08 11:59 p.m.11 views

CVE-2022-50631 RISC-V: kexec: Fix memory leak of fdt buffer

In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of fdt buffer This is reported by kmemleak detector: unreferenced object 0xff60000082864000 size 9588: comm "kexec", pid 146, jiffies 4294900634 age 64.788s hex dump first 32 bytes: d0 0d fe ed 00 0...

6.5AI score
SaveExploits0References6
CVE
CVE
added 2025/12/08 11:59 p.m.40 views

CVE-2022-50631

CVE-2022-50631 describes a memory-leak in the Linux kernel (RISC-V kexec path) where a buffer used to store the FDT is allocated with kvmalloc in elf_kexec_load but not freed when kexec is reloaded or unloaded. The root cause is a leak of the FDT buffer; a RISCV-specific cleanup function arch_kim...

6.2AI score0.00197EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/08 11:59 p.m.45 views

CVE-2022-50631 RISC-V: kexec: Fix memory leak of fdt buffer

In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of fdt buffer This is reported by kmemleak detector: unreferenced object 0xff60000082864000 size 9588: comm "kexec", pid 146, jiffies 4294900634 age 64.788s hex dump first 32 bytes: d0 0d fe ed 00 0...

0.00197EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/12/08 11:59 p.m.15 views

CVE-2022-50631

In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of fdt buffer This is reported by kmemleak detector: unreferenced object 0xff60000082864000 size 9588: comm "kexec", pid 146, jiffies 4294900634 age 64.788s hex dump first 32 bytes: d0 0d fe ed 00 0...

5.5AI score0.00197EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/08 11:06 p.m.8 views

CVE-2025-40310

In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: resolve a race in amdgpuamdkfddevicefinisw There is race in amdgpuamdkfddevicefinisw and interrupt. if amdgpuamdkfddevicefinisw run in b/w kfdcleanupnodes and kfreekfd, and KGD interrupt generated. kernel panic log:...

5.7AI score0.00186EPSS
SaveExploits0References4
Snyk
Snyk
added 2025/12/08 10:42 p.m.8 views

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the readanswer or processanswer functions when a query is terminated after reaching the maximum number of attempts. An attacker can cause a crash by triggering error conditions that lead to premature connection cleanup...

8.2CVSS6.4AI score0.00427EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/08 10:04 p.m.64 views

CVE-2025-62408

CVE-2025-62408 affects the c-ares asynchronous DNS resolver. Versions 1.32.3–1.34.5 terminate a query after maximum attempts when read_answer() or process_answer() are used, causing a Denial of Service. The issue is fixed in version 1.34.6. Remediation: upgrade to 1.34.6 (or later).

5.9CVSS6.4AI score0.00427EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/08 10:04 p.m.26 views

CVE-2025-62408 c-ares has a Use After Free vulnerability when connection is cleaned up after error

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...

5.9CVSS0.00427EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/12/08 10:04 p.m.8 views

CVE-2025-62408

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...

5.9CVSS6.3AI score0.00427EPSS
SaveExploits0
Rows per page
Query Builder