Lucene search
+L

3755 matches found

Tenable Nessus
Tenable Nessus
added 2022/01/20 12:0 a.m.83 views

RHEL 8 : kernel (RHSA-2022:0186)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0186 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: local privilege escalation by...

8.8CVSS7.2AI score0.25151EPSS
SaveExploits13References8
RedHat Linux
RedHat Linux
added 2022/01/19 3:12 p.m.5 views

kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL

A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them...

5.5CVSS6.6AI score0.00286EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/01/19 2:48 p.m.6 views

kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL

A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them...

5.5CVSS6.6AI score0.00286EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/01/19 2:48 p.m.81 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS6.9AI score0.25151EPSS
SaveExploits13References4
RedHat Linux
RedHat Linux
added 2022/01/19 2:22 p.m.6 views

kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL

A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them...

5.5CVSS6.6AI score0.00286EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/01/19 2:22 p.m.62 views

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

8.8CVSS7AI score0.25151EPSS
SaveExploits13References4
Tenable Nessus
Tenable Nessus
added 2022/01/19 12:0 a.m.44 views

RHEL 8 : kernel-rt (RHSA-2022:0187)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0187 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

8.8CVSS7.3AI score0.25151EPSS
SaveExploits13References8
OSV
OSV
added 2022/01/18 10:15 p.m.2 views

DEBIAN-CVE-2022-21693

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions an adversary with a primitive that allows for filesystem access from the context of the Onionshare process can access sensitive...

6.5CVSS6.6AI score0.01129EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/18 5:15 p.m.6 views

CVE-2020-14110

AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background...

7.8CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Mageia
Mageia
added 2022/01/18 3:43 p.m.160 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS...

7.8CVSS1.5AI score0.019EPSS
SaveExploits8References7
OSV
OSV
added 2022/01/18 3:43 p.m.15 views

MGASA-2022-0022 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.15 and fixes at least the following security issues: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the...

7.8CVSS6.8AI score0.019EPSS
SaveExploits7References8
OSV
OSV
added 2022/01/13 12:0 a.m.2 views

UBUNTU-CVE-2022-22745

Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

6.5CVSS6.7AI score0.00646EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/01/10 12:0 a.m.54 views

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2022-9010)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9010 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33722441 CVE-2021-4155 - fget: check that the fd still...

6.9CVSS6.8AI score0.00811EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/01/10 12:0 a.m.65 views

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9011)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9011 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33722441 CVE-2021-4155 - fget: check that the fd still...

6.9CVSS6.9AI score0.00811EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/01/10 12:0 a.m.72 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2022-9013)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9013 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33699625 CVE-2021-4155 - fget: check that the fd stil...

6.9CVSS6.8AI score0.00811EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/01/10 12:0 a.m.59 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9012)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9012 advisory. - xfs: map unwritten blocks in XFSIOCALLOC,FREESP just like fallocate Darrick J. Wong Orabug: 33699625 CVE-2021-4155 - fget: check that the fd stil...

6.9CVSS6.8AI score0.00811EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/05 5:31 p.m.5 views

USN-5206-1 linux-oem-5.14 vulnerability

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages...

4.4CVSS6.7AI score0.00515EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2021/12/31 12:0 a.m.40 views

CVE-2021-4155

A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them...

5.5CVSS6.7AI score0.00286EPSS
SaveExploits0References13
OSV
OSV
added 2021/12/23 1:15 a.m.8 views

CVE-2021-4068

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS8.1AI score
SaveExploits0References5
OSV
OSV
added 2021/12/23 1:15 a.m.7 views

CVE-2021-38019

Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS8.4AI score
SaveExploits0References4
Rows per page
Query Builder