Lucene search
K

22 matches found

SUSE CVE
SUSE CVE
added 2026/03/04 12:26 a.m.1 views

SUSE CVE-2026-26315

go-ethereum Geth is a golang execution layer implementation of the Ethereum protocol. Prior to version 1.16.9, through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits of the p2p node key. The issue is resolved in the v1.16.9 and v1.17.0 releases of Geth...

7.5CVSS5.9AI score0.00028EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-14127

Malicious code in bioql PyPI...

7.8AI score0.00065EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-37863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referri...

5.5CVSS6.2AI score0.00065EPSS
Exploits0References3
OSV
OSV
added 2025/07/04 11:15 a.m.1 views

CVE-2025-7060

A vulnerability was found in Monitorr up to 1.7.6m. It has been classified as problematic. This affects an unknown part of the file assets/config/installation/mkdbajax.php of the component Installer. The manipulation of the argument datadir leads to improper input validation. It is possible to...

8.1CVSS6AI score
Exploits0References3
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.2 views

Monitorr 输入验证错误漏洞

Monitorr is a web front-end for Monitorr open source. It is used to display the status of any web application or service in real time. An input validation error vulnerability exists in Monitorr 1.7.6m and earlier versions, which stems from improper input validation due to incorrect manipulation o...

8.1CVSS4.6AI score0.00266EPSS
Exploits1References4
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.1 views

Astra Linux - уязвимость в linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...

5.5CVSS6.6AI score0.00065EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/05/10 2:52 a.m.1 views

SUSE CVE-2025-37863

In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...

5.5CVSS6.4AI score0.00065EPSS
Exploits0References3
OSV
OSV
added 2025/05/09 7:16 a.m.2 views

DEBIAN-CVE-2025-37863

In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...

5.5CVSS5.6AI score0.00065EPSS
Exploits0References1
OSV
OSV
added 2025/05/09 7:16 a.m.0 views

UBUNTU-CVE-2025-37863

In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...

5.5CVSS5.7AI score0.00065EPSS
Exploits0References26
Cvelist
Cvelist
added 2025/05/09 6:43 a.m.7 views

CVE-2025-37863 ovl: don't allow datadir only

In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...

0.00065EPSS
Exploits0References4
OSV
OSV
added 2025/05/09 6:43 a.m.4 views

CVE-2025-37863 ovl: don't allow datadir only

In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...

5.5CVSS6.5AI score0.00065EPSS
Exploits0References7
CVE
CVE
added 2025/05/09 6:43 a.m.73 views

CVE-2025-37863

CVE-2025-37863 affects the Linux kernel overlayfs (ovl). The issue arises when a data-only layer is pointed to by an upper layer, something not currently used but previously allowed only via the datadir+ feature, which could trigger an Oops. The documented fix disables datadir without a lowerdir,...

5.5CVSS6.9AI score0.00065EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/10 12:0 a.m.0 views

PT-2025-20513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the overlayfs in the Linux kernel, where it was possible for the upper layer to directly refer to a data layer without a lowerdir, which could result in an Oops...

5.5CVSS6.8AI score0.00065EPSS
Exploits0
Veracode
Veracode
added 2020/04/10 12:43 a.m.40 views

Privilege Escalation

mysql is vulnerable to privilege escalation. The vulnerability exists when the "datadir" option was configured with a relative path, MySQL did not properly check paths used as arguments for the DATA DIRECTORY and INDEX DIRECTORY directives. An authenticated attacker could use this flaw to bypass...

4.4CVSS2.7AI score0.00027EPSS
Exploits3References24Affected Software1
OpenVAS
OpenVAS
added 2016/09/26 12:0 a.m.133 views

Oracle MySQL 'my.conf' Security Bypass Vulnerability - Windows

Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

10CVSS7.9AI score0.89577EPSS
Exploits16References1
OpenVAS
OpenVAS
added 2016/09/26 12:0 a.m.32 views

Oracle MySQL 'my.conf' Security Bypass Vulnerability - Linux

Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

10CVSS7.9AI score0.89577EPSS
Exploits16References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

DWebPro 3.4.1 Http.ini Plaintext Password Storage Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8438/info A vulnerability has been reported to exist in the DWebPro web server software. This problem allows an attacker to view database authentication credentials by accessing a plain text file named 'http.ini'. An...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

MySQL 3.23.x mysqld Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7052/info A vulnerability has been discovered for MySQL that may allow the mysqld service to start with elevated privileges. An attacker can exploit this vulnerability by creating a DATADIR/my.cnf that includes the line...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2010/02/19 12:0 a.m.48 views

RedHat Update for mysql RHSA-2010:0109-01

Check for the Version of mysql OpenVAS Vulnerability Test RedHat Update for mysql RHSA-2010:0109-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

6.8CVSS7.6AI score0.07665EPSS
Exploits8References2
Tenable Nessus
Tenable Nessus
added 2005/05/19 12:0 a.m.11 views

Fedora Core 2 : squid-2.5.STABLE9-1.FC2.2 (2005-275)

Tue Mar 29 2005 Jay Fenlason 7:2.5.STABLE9-1.FC3.2 - more upstream patches - include -libbind patch, to prevent squid from picking up a dependency on libbind. - remove references to /etc/squid/errors, since squid now uses datadir/squid/errors/English by default. overridable in squid.conf - Mark...

5.5AI score
Exploits0References1
Rows per page
Query Builder