Lucene search
K

89 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix for live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The...

5.5CVSS6.1AI score0.00065EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/30 4:41 p.m.2 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the certificate issuance/auto-certification flows in api/certificate/issue.go and api/sites/autocert.go, and JSON field encryption migration in the internal/migrate. An attacker c...

9.9CVSS5.9AI score0.00041EPSS
Exploits1References2
Snyk
Snyk
added 2026/03/30 4:41 p.m.2 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the certificate issuance/auto-certification flows in api/certificate/issue.go and api/sites/autocert.go, and JSON field encryption migration in the internal/migrate. An attacker c...

9.9CVSS5.9AI score0.00041EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.3 views

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities were due to improper authentication procedures, and they could allow adjacent attackers to...

6.9CVSS5.8AI score0.00067EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.1 views

Cohesity TranZman 安全漏洞

Cohesity TranZman is a data migration and recovery software developed by Cohesity Corporation. Version Cohesity TranZman 4.0 Build 14614 contains a security vulnerability. This vulnerability stems from improper access control in the component /opt/SRLtzm/bin/TapeDumper, which could allow attacker...

7.8CVSS5.8AI score0.00014EPSS
Exploits2References2
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.1 views

Cohesity TranZman 安全漏洞

Cohesity TranZman is a data migration and recovery software developed by Cohesity Corporation. Version 4.0 Build 14614 of Cohesity TranZman contains a security vulnerability. This vulnerability stems from the use of weak encryption algorithms for data encryption, which may allow attackers to easi...

7.5CVSS5.8AI score0.00006EPSS
Exploits2References3
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.1 views

Cohesity TranZman 安全漏洞

Cohesity TranZman is a data migration and recovery software developed by Cohesity Corporation. Cohesity TranZman 4.0 Build 14614 contains security vulnerabilities. These vulnerabilities stem from multiple authenticated OS command injection vulnerabilities, which may allow authenticated...

7.2CVSS6AI score0.00053EPSS
Exploits2References3
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.1 views

Cohesity TranZman 安全漏洞

Cohesity TranZman is a data migration and recovery software developed by Cohesity Corporation. Version 4.0 Build 14614 of Cohesity TranZman contains a security vulnerability. This vulnerability arises from the upload of any file with authenticated access, potentially allowing attackers with...

7.2CVSS6.2AI score0.00017EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.3 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-38283)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38283 advisory. - In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration...

5.5CVSS5.3AI score0.00065EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/01/20 10:50 p.m.7 views

WordPress The Events Calendar plugin <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Control vulnerability

Missing Authorization to Authenticated Subscriber+ Data Migration Control vulnerability discovered by type5afe in WordPress Plugin The Events Calendar versions = 6.15.13...

5.4CVSS5.5AI score0.00082EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2023-60294

In the Linux kernel, the following vulnerability has been resolved: f2fs: Fix system crash due to lack of free space in LFS When f2fs tries to checkpoint during foreground gc in LFS mode, system crash occurs due to lack of free space if the amount of dirty node and dentry pages generated by data...

6.2AI score0.0002EPSS
Exploits0References4
OSV
OSV
added 2025/12/24 1:7 p.m.3 views

CVE-2023-54151 f2fs: Fix system crash due to lack of free space in LFS

In the Linux kernel, the following vulnerability has been resolved: f2fs: Fix system crash due to lack of free space in LFS When f2fs tries to checkpoint during foreground gc in LFS mode, system crash occurs due to lack of free space if the amount of dirty node and dentry pages generated by data...

6.6AI score0.0002EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.1 views

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing sensitive data...

7.1CVSS6AI score0.00007EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-2045

Malware in sbrugna...

7.8CVSS7.6AI score0.00089EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-2180

Malware in sbrugna...

9.8CVSS8.6AI score0.0069EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.1 views

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. A code injection vulnerability exists in SAP Landscape Transformation SLT that originates from the ability to inject arbitrary ABAP code via RFC...

9.9CVSS7.5AI score0.00139EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device...

5.5CVSS6.4AI score0.00065EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/07/10 11:23 p.m.2 views

SUSE CVE-2025-38283

In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The liv...

5.5CVSS7.9AI score0.00065EPSS
Exploits0References16
NVD
NVD
added 2025/07/10 8:15 a.m.5 views

CVE-2025-38283

In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The liv...

5.5CVSS0.00065EPSS
Exploits0References4
OSV
OSV
added 2025/07/10 8:15 a.m.2 views

DEBIAN-CVE-2025-38283

In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The liv...

5.5CVSS5.4AI score0.00065EPSS
Exploits0References1
Rows per page
Query Builder