Lucene search
K

34 matches found

Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.6 views

PT-2026-42452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the t7xx port enum msg handler function where the modem-supplied port count field is used as a loop bound over port msg-data without verifying if the message buffer...

8.8CVSS5.9AI score0.00245EPSS
Exploits0References28
Debian CVE
Debian CVE
added 2026/02/04 4:7 p.m.5 views

CVE-2026-23070

In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes supported, advertised and EEPROM data in shared firmware structure which kernel access via MAC blockCGX/RPM. Accessing fwdata, on boards booted...

5.5CVSS5.2AI score0.00121EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/28 12:0 a.m.8 views

MiracleLinux 8 : kernel-4.18.0-553.94.1.el8_10 (AXSA:2026-086:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-086:04 advisory. kernel: smb: client: Fix use-after-free in cifsfilldirent CVE-2025-38051 kernel: smb: client: let recvdone verify dataoffset, datalength and...

7.8CVSS7.2AI score0.00177EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-16810

Malware in sbrugna...

9.8CVSS9.2AI score0.02031EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:6 a.m.7 views

CVE-2019-14038

Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

7.1CVSS7.3AI score0.00186EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.2 views

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to the SYSTEM level.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to deficiencies in the mechanism for checking input data. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

7.8CVSS8AI score0.01937EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.9 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-21666)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21666 advisory. - In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in...

5.5CVSS6.1AI score0.0021EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/03/27 4:42 p.m.7 views

CVE-2022-49739

In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes is within the allowed range when reading inodes from disk gfs2dinodein. This prevents us from on-disk corruption. The two checks in...

5.5CVSS5.4AI score0.0018EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/02/24 12:0 a.m.3 views

The vulnerabilities of the x86/mtrr components in the Linux operating system’s kernel allow a hacker to trigger a service failure.

The vulnerability of the x86/mtrr components in the Linux operating system’s kernel is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.5CVSS6.5AI score0.0024EPSS
Exploits0References39Affected Software5
OSV
OSV
added 2024/12/27 3:15 p.m.2 views

AZL-54777 CVE-2024-56574 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020probe KASAN reported a null-ptr-deref issue when executing the following command: echo ts2020 0x20 /sys/bus/i2c/devices/i2c-0/newdevice KASAN: null-ptr-deref in range...

5.5CVSS6.3AI score0.00236EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/27 2:23 p.m.6 views

CVE-2024-56574 media: ts2020: fix null-ptr-deref in ts2020_probe()

In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020probe KASAN reported a null-ptr-deref issue when executing the following command: echo ts2020 0x20 /sys/bus/i2c/devices/i2c-0/newdevice KASAN: null-ptr-deref in range...

7.5AI score0.00236EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2024/08/28 12:34 p.m.1 views

kernel: net: bridge: xmit: make sure we have at least eth header len bytes

A vulnerability was found in the Linux kernel in the net: bridge component, where the xmit function in the bridge device could trigger an uninitialized value error if a short skb less than the required ETHHLEN bytes is sent. This condition could cause unexpected behavior due to insufficient check...

7.1CVSS6.6AI score0.00286EPSS
Exploits0References5
OSV
OSV
added 2024/02/27 10:15 a.m.3 views

CVE-2021-46934

In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2ctransfer, ex: zero msgs. Userspace should not be able to trigger warnings, so this patch adds validation checks for user data in compact ioctl to...

3.3CVSS7.5AI score
Exploits0References5
OSV
OSV
added 2023/09/02 11:5 a.m.1 views

OESA-2023-1555 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. ...

6.5CVSS7AI score0.02107EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:36 a.m.2 views

SUSE CVE-2013-4078

epan/dissectors/packet-rdp.c in the RDP dissector in Wireshark 1.8.x before 1.8.8 does not validate return values during checks for data availability, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5CVSS6.7AI score0.03402EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:0 a.m.5 views

The vulnerability of the i740 video driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the i740 video driver in the Linux operating system is related to the lack of checks on user data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00271EPSS
Exploits0References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.2 views

The vulnerability of Intel microprocessor microprogramming software, related to insufficient checking of input data, allows a hacker to trigger a service failure.

The vulnerability of Intel microprocessor microprogramming software is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system’s operation...

2.3CVSS5.8AI score0.00258EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.4 views

The vulnerability of the Network File System (NFS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Network File System NFS of Windows operating systems exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.77645EPSS
Exploits2References4
BDU FSTEC
BDU FSTEC
added 2022/05/05 12:0 a.m.1 views

The vulnerability of the Solaris operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Solaris operating system’s kernel exists due to insufficient checks on input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.9CVSS6.9AI score0.00244EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/05 12:0 a.m.2 views

The vulnerability of the Solaris operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Solaris operating system’s kernel exists due to insufficient checks on input data. Exploiting this vulnerability can allow an attacker to cause service failures...

4CVSS6.6AI score0.00242EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder