Lucene search
K

197 matches found

CNNVD
CNNVD
added 6 days ago5 views

Elastic Kibana 安全漏洞

Elastic Kibana is a data visualization dashboard software provided by the Elastic company. There is a security vulnerability in Elastic Kibana, which stems from uncontrolled resource consumption. This allows authenticated users with low privileges to submit specially crafted large data packets to...

6.5CVSS5.8AI score0.00042EPSS
Exploits0References2
OSV
OSV
added 2026/05/11 11:16 a.m.0 views

SUSE-SU-2026:21622-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix the following issues: - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. - CVE-2026-43500: rxrpc: unshare DATA/RESPONSE packets when paged frags are present bsc1264450...

8.8CVSS6AI score0.40266EPSS
Exploits30References5
UbuntuCve
UbuntuCve
added 2026/05/11 8:16 a.m.8 views

CVE-2026-43500

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...

7.8CVSS6AI score0.40266EPSS
Exploits19References6
OSV
OSV
added 2026/05/11 8:16 a.m.2 views

UBUNTU-CVE-2026-43500

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...

7.8CVSS6AI score0.40266EPSS
Exploits19References11
Debian CVE
Debian CVE
added 2026/05/11 6:26 a.m.7 views

CVE-2026-43500

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpcinputcallevent and the RESPONSE handler in rxrpcverifyresponse copy the skb to a linear one before calling into the security o...

7.8CVSS6AI score0.40266EPSS
Exploits19
CNNVD
CNNVD
added 2026/05/11 12:0 a.m.2 views

Linux kernel 缓冲区错误漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. The Linux kernel has a buffer error vulnerability, which stems from the lack of separation of paginated fragments during the processing of DATA and RESPONSE packets in...

7.8CVSS6.2AI score0.40266EPSS
Exploits19References2
Oracle linux
Oracle linux
added 2026/05/10 12:0 a.m.9 views

Unbreakable Enterprise kernel security update

6.12.0-202.76.4.1 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present Hyunwoo Kim Orabug: 39344513 CVE-2026-43500 - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets David Howells Orabug: 39344513 - rxrpc: only handle RESPONSE during service challenge Wang Jie...

9.8CVSS6.4AI score0.40266EPSS
Exploits253
OSV
OSV
added 2026/05/08 7:44 p.m.3 views

CLSA-2026-1778267481 Update of kernel-uek

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags...

5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which may lead to a overflow when the x25sock.fraglen variable is accumulated, potentially causing errors in data...

7.5CVSS5.9AI score0.00074EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to discard queued data packets, potentially leading to the use of already released objects...

7.8CVSS5.8AI score0.00022EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.1 views

Labkotec LID-3300IP 访问控制错误漏洞

The Labkotec LID-3300IP is an ice detector developed by the Finnish company Labkotec. The Labkotec LID-3300IP has a security vulnerability related to access control. This vulnerability stems from defects in the ice detector software, which may allow unauthorized attackers to modify device...

8.8CVSS5.9AI score0.00029EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/02 12:0 a.m.1 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. There are security vulnerabilities in Qualcomm Chipsets, which stem from the reception of invalid TB LTE RLC data packets, potentially leading to instant denial-of-service attacks...

6.5CVSS5.8AI score0.00034EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.2 views

bareiron 安全漏洞

Bareiron is a Minecraft game server developed by the P2R3 individual developer. Bareiron has a security vulnerability, which stems from a buffer overflow. This vulnerability could allow unverified remote attackers to trigger a denial-of-service attack by sending data packets...

7.5CVSS6.2AI score0.00111EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/17 12:0 a.m.1 views

Absolute Secure Access security vulnerability

Absolute Secure Access is an application developed by Absolute Corporation. It provides secure service edge SSE services optimized for both mixed and mobile work environments. Versions of Absolute Secure Access prior to 14.20 contained a security vulnerability that could cause server crashes if...

7.5CVSS5.8AI score0.00033EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:28 a.m.19 views

CVE-2021-33044

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

10CVSS7.3AI score0.94269EPSS
Exploits10References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:56 a.m.9 views

CVE-2022-38980

The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions...

9.8CVSS7AI score0.00224EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 5:30 a.m.3 views

CVE-2025-47323

Memory corruption while routing GPR packets between user and root when handling large data packet...

7.8CVSS7.2AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2025/12/18 6:15 a.m.1 views

CVE-2025-47323

Memory corruption while routing GPR packets between user and root when handling large data packet...

7.8CVSS0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/18 5:29 a.m.1 views

EUVD-2025-204028

Memory corruption while routing GPR packets between user and root when handling large data packet...

7.8CVSS6.6AI score0.00016EPSS
Exploits0References2
CVE
CVE
added 2025/12/18 5:29 a.m.5 views

CVE-2025-47323

CVE-2025-47323 describes memory corruption when routing GPR packets between user and root space, in Qualcomm embedded platform firmware. Red Hat, NVD, CVE List and vuln enrichment entries all cite memory corruption on handling large data packets as the issue, with several sources also noting a re...

7.8CVSS6.7AI score0.00016EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder