Lucene search
+L

159 matches found

Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001245 advisory. A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environme...

5.3CVSS6.4AI score0.07199EPSS
SaveExploits5References18
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•26 views

PT-2026-27739

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc1lblk+ 84 Description The Linux kernel's blktrace component contains an issue where this cpu read and this cpu write are used in a preemptible context. Specifically, tracing record cmdline utilizes these...

5.5CVSS5.7AI score0.00119EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/12/30 12:31 a.m.•23 views

SUSE CVE-2018-25153

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the reported issue does not constitute a security vulnerability and represents a minor, non-exploitable memory leak...

6.1AI score0.00028EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2018-25153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Barcode 0.99 contains a memory leak vulnerability in the command line processing function within cmdline.c. Attackers can exploit this vulnerability by...

7.5CVSS6.8AI score0.00028EPSS
SaveExploits0References2
OSV
OSV
•added 2025/11/05 6:41 p.m.•10 views

GO-2025-4001 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd...

6.8CVSS8.1AI score0.0035EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/05 12:00 a.m.•2 views

PT-2025-45806

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd...

5.9AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2025/10/15 12:57 p.m.•22 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2025-39782: jbd2: prevent softlockup in jbd2logdocheckpoint bsc1249526. CVE-2025-39773: net: bridge: fix soft lockup in...

9.2CVSS6.1AI score0.05366EPSS
SaveExploits6References672
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2004-1064

Malware in sbrugna...

3.6CVSS6.3AI score0.00319EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-18483

Malware in sbrugna...

7.8CVSS7.3AI score0.00313EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-1956

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.02704EPSS
SaveExploits1References4
OSV
OSV
•added 2025/10/02 9:20 p.m.•10 views

GHSA-7232-97C6-J525 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Impact In LXD's devLXD server, the source container identification process uses process cmdline command line information, allowing attackers to impersonate other containers by spoofing process names. The core issue lies in the findContainerForPID function in lxd/apidevlxd.go. This function...

5.1CVSS7AI score0.0035EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/10/02 9:20 p.m.•15 views

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Impact In LXD's devLXD server, the source container identification process uses process cmdline command line information, allowing attackers to impersonate other containers by spoofing process names. The core issue lies in the findContainerForPID function in lxd/apidevlxd.go. This function...

6.8CVSS7AI score0.0035EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/09/02 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: iommu/amd: Avoid stack buffer overflow from kernel cmdline Ubuntu Linux - iommu/amd: Avoid stack buffer overflow from kernel...

7.8CVSS7AI score0.00403EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2025/08/27 1:29 a.m.•322 views

Exploit for CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buf...

7.8AI score0.00403EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2025/08/26 11:23 p.m.•10 views

SUSE CVE-2025-38676

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...

4.7CVSS7AI score0.00403EPSS
SaveExploits1References22
OSV
OSV
•added 2025/08/26 1:15 p.m.•3 views

DEBIAN-CVE-2025-38676

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...

7.8CVSS6.5AI score0.00403EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/26 12:00 a.m.•2 views

CVE-2025-38676: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length...

7.8CVSS6.1AI score0.00403EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2024/12/29 2:43 p.m.•15 views

CVE-2024-56573

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdlineptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed whe...

5.5CVSS6.8AI score0.00234EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/27 3:15 p.m.•10 views

UBUNTU-CVE-2024-56573

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdlineptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed whe...

7CVSS6.2AI score0.00234EPSS
SaveExploits0References20
OSV
OSV
•added 2024/12/27 2:23 p.m.•13 views

CVE-2024-56573 efi/libstub: Free correct pointer on failure

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdlineptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed whe...

7CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder