Lucene search
+L

18 matches found

CNNVD
CNNVD
•added 2026/10/21 12:00 a.m.•8 views

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a security vulnerability. This vulnerability arises because the built-in /flags service can be manipulated via ?setvalue= to alter the bvar/mbvar dump path; additionally, the bvardumptabs path is not properly sanitized. As a result, remote attackers...

7.5CVSS5.9AI score0.0055EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/07/21 12:58 p.m.•22 views

SUSE CVE-2026-64189

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ipsetlist resize The release path of ipsetdumpdo and ipsetdumpdone read inst-ipsetlist via ipsetrefnetlink, a plain rcudereferenceraw of the array pointer. These run from netlinkrecvmsg...

7CVSS6.2AI score0.00126EPSS
SaveExploits0References151
Positive Technologies
Positive Technologies
•added 2026/07/20 12:00 a.m.•38 views

PT-2026-61642

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the netfilter ipset component between the dump process and the ip set list resize operation. The functions ip set dump do and ip set dump done access inst-ip s...

7.8CVSS5.7AI score0.00126EPSS
SaveExploits0
NVD
NVD
•added 2026/06/24 8:16 a.m.•26 views

CVE-2026-52917

In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...

7.1CVSS0.00128EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
•added 2026/06/24 8:16 a.m.•23 views

CVE-2026-52917

In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...

7.1CVSS6.5AI score0.00128EPSS
SaveExploits0References35
EUVD
EUVD
•added 2026/06/24 7:14 a.m.•27 views

EUVD-2026-38720

In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...

6.5AI score0.00128EPSS
SaveExploits0References8
CVE
CVE
•added 2026/06/24 7:14 a.m.•115 views

CVE-2026-52917

Summary (concrete details from provided sources): CVE-2026-52917 fixes a Linux kernel SCTP diagnostics flaw in the sock_diag lookup during the dump_one path. The issue occurs when an SCTP association has been freed but is still being reported, allowing the code to dereference an invalid associati...

7.1CVSS6.5AI score0.00128EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/04/24 2:45 p.m.•23 views

EUVD-2026-25550

In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadvblaaddclaim can replace claim-backbonegw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences...

5.9AI score0.00399EPSS
SaveExploits0References6
CVE
CVE
•added 2026/04/24 2:45 p.m.•107 views

CVE-2026-31657

CVE-2026-31657 affects the Linux kernel batman-adv component. The flaw arises when batman-adv’s batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway’s final reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_g...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
•added 2026/03/18 12:31 p.m.•27 views

EUVD-2026-12808

In the Linux kernel, the following vulnerability has been resolved: net/sched: actgate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list. Convert the parameters to an RCU-protected snapshot and swap update...

5.8AI score0.00136EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/03/18 11:16 a.m.•23 views

CVE-2026-23245

In the Linux kernel, the following vulnerability has been resolved: net/sched: actgate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list. Convert the parameters to an RCU-protected snapshot and swap update...

7.8CVSS5.8AI score0.00136EPSS
SaveExploits0References19
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•16 views

EUVD-2025-201871

In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock, sctpdiagdump - sctpforeachendpoint - sctpepdump make sure not to exceed bounds in case the address list has grown between buffer allocatio...

6.2AI score0.00188EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-5311

Malware in sbrugna...

7.8CVSS7.3AI score0.00202EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/04 12:00 a.m.•17 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from too many GRC elements in the protection override dump path, which could cause the kernel to crash...

7.3AI score0.00157EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2023/11/30 12:00 a.m.•15 views

PT-2024-13084 · Peplink · Peplink Smart Reader

Name of the Vulnerable Software and Affected Versions: Peplink Smart Reader version 1.2.0 Description: An information disclosure vulnerability exists in the web interface /cgi-bin/debug dump.cgi functionality. A specially crafted HTTP request can lead to a disclosure of sensitive information. An...

9.8CVSS7.4AI score0.37678EPSS
SaveExploits5References34
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/02 12:00 a.m.•19 views

CVE-2019-14054: Undefined Security Weakness

Improper permissions in XBLSEC region enable user to update XBLSEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, MSM8998,...

7.8CVSS5.8AI score0.00202EPSS
SaveExploits0References1
zdt
zdt
•added 2018/06/01 12:00 a.m.•55 views

SonyPlaystation 3 ( #PS3 ) 4.82 - #Jailbreak (ROP) Exploit

Exploit for hardware platform in category local exploits EDB Note http://ps3xploit.com/help/dumper.html EDB Download https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44820.zip Dumper Help Warning: Due to the lack of proper checks after exiting the ROP chai...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2017/10/05 12:00 a.m.•7 views

PT-2018-10176

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.5 Description The issue is related to a missing processor feature check and an erroneous use of transactional memory instructions in the core dump path. This can lead to a denial of service when a guest kern...

5.6CVSS0.00607EPSS
SaveExploits0References175
Rows per page
Query Builder