Lucene search
+L

1327 matches found

SUSE CVE
SUSE CVE
added 2025/09/19 11:23 p.m.5 views

SUSE CVE-2025-39847

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

5.5CVSS6.5AI score0.00149EPSS
SaveExploits0References22
NVD
NVD
added 2025/09/19 4:15 p.m.8 views

CVE-2025-39847

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

5.5CVSS0.00149EPSS
SaveExploits0References11
OSV
OSV
added 2025/09/19 4:15 p.m.9 views

AZL-67553 CVE-2025-39847 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

5.5CVSS5.6AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 4:15 p.m.2 views

DEBIAN-CVE-2025-39847

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

5.5CVSS5.3AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 3:26 p.m.4 views

CVE-2025-39847 ppp: fix memory leak in pad_compress_skb

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References14
Debian CVE
Debian CVE
added 2025/09/19 3:26 p.m.11 views

CVE-2025-39847

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...

5.5CVSS5.3AI score0.00149EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/09/19 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to free an old skb when memory allocation fails in the padcompressskb function, which could lead...

5.5CVSS5.9AI score0.00149EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/09/19 12:0 a.m.10 views

PT-2025-38583

Name of the Vulnerable Software and Affected Versions Sync In versions through 1.1.1 Description A directory traversal issue exists in Sync In server. Authenticated attackers can achieve read and write access to the system through the FilesManager.saveMultipart function located in...

5.3CVSS6.6AI score0.00691EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/09/19 12:0 a.m.4 views

CVE-2025-56869

Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in backend/src/applications/files/services/files-manager.service.ts, and FilesManager.compress function in...

6.6AI score0.00691EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/19 12:0 a.m.26 views

CVE-2025-56869

CVE-2025-56869 describes a directory traversal vulnerability in the Sync In server (up to version 1.1.1). The issue affects the files-management code paths: FilesManager.saveMultipart and FilesManager.compress in backend/src/applications/files/services/files-manager.service.ts, enabling authentic...

5.3CVSS6.6AI score0.00691EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/19 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2025-39847

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb =...

5.5CVSS6.2AI score0.00149EPSS
SaveExploits0References3
Redos
Redos
added 2025/09/11 12:0 a.m.11 views

ROS-20250911-07

A vulnerability in the Apache Commons Compress archiver is related to the execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to affect the integrity, availability, and confidentiality of protected information. confidentiality of...

8.1CVSS6.4AI score0.00441EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/09/09 11:1 p.m.10 views

WordPress Compress Then Upload plugin < 1.0.5 - Admin+ Arbitrary File Upload vulnerability

Admin+ Arbitrary File Upload vulnerability discovered by Muhammed Çelik in WordPress Plugin Compress Then Upload versions 1.0.5...

3.8CVSS6.7AI score0.00265EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2025/09/09 6:0 a.m.15 views

CVE-2025-8889 Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload

The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...

0.00265EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.10 views

WordPress plugin Compress & Upload 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

3.8CVSS6.7AI score0.00265EPSS
SaveExploits2References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 1:7 a.m.6 views

Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

...

5.5CVSS7AI score0.00489EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 12:13 a.m.7 views

Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

...

5.5CVSS7AI score0.00898EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/03 9:50 p.m.10 views

f2fs: fix potential deadloop in prepare_compress_overwrite()

...

5.5CVSS6.8AI score0.00116EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.7 views

PT-2025-38554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the pad compress skb function within the PPP Point-to-Point Protocol component of the Linux kernel. If the alloc skb function fails during the compression process...

5.5CVSS6AI score0.00149EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/29 6:55 p.m.2 views

Malicious code in mega-compress (npm)

The package mega-compress was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder