Lucene search
+L

12104 matches found

AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•13 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iouring/msgring: Ensure that the freeing of iokiocb is deferred to a later time for the RCU. syzbot reports that deferring or localizing the taskworkadd operation via msgring can result in a request being freed before it should b...

7.8CVSS6.5AI score0.00174EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•8 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: x86/iopl: Fixed inconsistencies in TIFIOBITMAP The function iobitmapexit is called from exitthread, when a task exists or when a fork fails. In the latter case, exitthread cleans up resources that were allocated during fork...

5.5CVSS6.1AI score0.0021EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/11/01 12:00 a.m.•20 views

Linux copy_from_iter copy_to_iter DoS

The vulnerability of the copyfromiter and copytoiter functions in the Linux operating system is related to the lack of code checks for function return. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS7.5AI score0.00165EPSS
SaveExploits0References14Affected Software4
AstraLinux
AstraLinux
•added 2025/10/31 4:38 p.m.•13 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result i...

5.5CVSS6AI score0.00207EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2025/10/31 4:38 p.m.•15 views

Astra Linux - уязвимость в haproxy

HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding h2send loop under a certain set of conditions, as exploited in the wild in 2024...

7.5CVSS7.2AI score0.01203EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/31 3:30 p.m.•43 views

EUVD-2025-37360

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

9.8CVSS6.3AI score0.00395EPSS
SaveExploits1References2
osv_pysec
osv_pysec
•added 2025/10/31 3:15 p.m.•28 views

PYSEC-2025-225

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

7.1CVSS6.3AI score0.0018EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2025/10/31 3:15 p.m.•81 views

PYSEC-2025-226

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

9.8CVSS6.3AI score0.00395EPSS
SaveExploits1References1
PyPA
PyPA
•added 2025/10/31 3:15 p.m.•25 views

PYSEC-2025-225

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

7.1CVSS6.3AI score0.0018EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2025/10/31 3:15 p.m.•43 views

UBUNTU-CVE-2025-57108

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

9.8CVSS6.3AI score0.00395EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/10/31 12:00 a.m.•35 views

CVE-2025-57107

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

0.0018EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•22 views

Kitware VTK security vulnerabilities

Kitware VTK is a 3D image generation software from Kitware open source. A security vulnerability exists in Kitware VTK 9.5.0 and earlier versions, which stems from a heap buffer overflow that can be caused by the copy constructor of the Accessor object not properly validating buffer boundaries wh...

7.1CVSS6.2AI score0.0018EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•33 views

PT-2025-44637

Name of the Vulnerable Software and Affected Versions Kitware VTK Visualization Toolkit versions through 9.5.0 Description The software contains a heap use-after-free issue in vtkGLTFDocumentLoader. This occurs during mesh object copy operations, where vector members are accessed after the memory...

9.8CVSS6.2AI score0.00395EPSS
SaveExploits1References5
Mend
Mend
•added 2025/10/31 12:00 a.m.•9 views

CVE-2025-57108

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

9.8CVSS6.3AI score0.00395EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•9 views

CVE-2025-57108: Use After Free

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

9.8CVSS6.3AI score0.00395EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/10/31 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-57108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh...

9.8CVSS6.4AI score0.00395EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/10/31 12:00 a.m.•35 views

CVE-2025-57108

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

0.00395EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/31 12:00 a.m.•72 views

CVE-2025-57108

Kitware VTK (Visualization Toolkit) versions through 9.5.0 are affected by a heap use-after-free vulnerability within the vtkGLTFDocumentLoader component. The issue occurs during mesh object copy operations when the software processes GLTF files containing corrupted or invalid mesh reference stru...

9.8CVSS6.3AI score0.00395EPSS
SaveExploits1References1Affected Software1
Malwarebytes
Malwarebytes
•added 2025/10/30 1:19 p.m.•61 views

Fake PayPal invoice from Geek Squad is a tech support scam

One of our employees received this suspicious email and showed it to me. Although it's a pretty straightforward attempt to lure targets into calling the scammers, it's worth writing up because it looks like it was sent out in bulk. Let's look at the red flags. Firstly, the sender address : PayPal...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/10/30 8:01 a.m.•12 views

misc: fastrpc: Fix copy buffer page size

...

7.8CVSS6.6AI score0.00204EPSS
SaveExploits0
Rows per page
Query Builder