Lucene search
+L

5505 matches found

Microsoft CVE
Microsoft CVE
added 2025/09/04 1:00 a.m.14 views

net: libwx: remove duplicate page_pool_put_full_page()

...

9.8CVSS7.4AI score0.00302EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/03 10:39 p.m.5 views

wifi: rtw89: avoid to add interface to list twice when SER

...

8.8CVSS7AI score0.00343EPSS
SaveExploits0
NVD
NVD
added 2025/09/03 1:15 p.m.7 views

CVE-2025-38678

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

7.8CVSS0.00274EPSS
SaveExploits1References7
OSV
OSV
added 2025/09/03 1:15 p.m.11 views

AZL-66773 CVE-2025-38678 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

7.8CVSS5.6AI score0.00274EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/03 1:15 p.m.3 views

DEBIAN-CVE-2025-38678

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

5.5CVSS5.3AI score0.00274EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/03 1:15 p.m.23 views

AZL-70774 CVE-2025-38678 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

7.8CVSS5.9AI score0.00274EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/03 1:15 p.m.16 views

UBUNTU-CVE-2025-38678

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

7.8CVSS5.9AI score0.00274EPSS
SaveExploits1References30
OSV
OSV
added 2025/09/03 1:01 p.m.14 views

CVE-2025-38678 netfilter: nf_tables: reject duplicate device on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

7.8CVSS6.1AI score
SaveExploits0References10
CVE
CVE
added 2025/09/03 1:01 p.m.95 views

CVE-2025-38678

The CVE-2025-38678 vulnerability affects the Linux kernel’s netfilter nf_tables path, where a chain/flowtable update can carry duplicate devices within the same batch. The bug could leave the hook for a duplicated device unregistering, potentially enabling a foothold in local updates. The issue i...

7.8CVSS5.9AI score0.00274EPSS
SaveExploits1References7Affected Software1
Cvelist
Cvelist
added 2025/09/03 1:01 p.m.24 views

CVE-2025-38678 netfilter: nf_tables: reject duplicate device on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving...

7.8CVSS0.00274EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/09/03 12:00 a.m.10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the denial of duplicate device updates, which could result in an unregistered hook...

5.5CVSS6.4AI score0.00274EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/02 4:52 p.m.1 views

Allocation of Resources Without Limits or Throttling

Overview pocketmine/pocketmine-mp is a highly customisable, open source server software for Minecraft: Bedrock Edition written in PHP Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the STATUSSENDPACKS handling of...

8.7CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2025/09/02 4:52 p.m.7 views

GHSA-FQQV-56H5-F57G PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking

Summary A denial-of-service / out-of-memory vulnerability exists in the STATUSSENDPACKS handling of ResourcePackClientResponsePacket. PocketMine-MP processes the packIds array without verifying that all entries are unique. A malicious non-standard Bedrock client can send multiple duplicate valid...

8.7CVSS7.2AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/09/02 4:52 p.m.11 views

PocketMine-MP `ResourcePackDataInfoPacket` amplification vulnerability due to lack of resource pack sequence status checking

Summary A denial-of-service / out-of-memory vulnerability exists in the STATUSSENDPACKS handling of ResourcePackClientResponsePacket. PocketMine-MP processes the packIds array without verifying that all entries are unique. A malicious non-standard Bedrock client can send multiple duplicate valid...

7.2AI score
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2017-12635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submi...

10CVSS8.1AI score0.9974EPSS
SaveExploits23References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-3408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stbdupreplace. The manipulation...

8.8CVSS6.3AI score0.00467EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-39173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TL...

7.5CVSS7.5AI score0.04504EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-4001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the passwo...

6.8CVSS6.6AI score0.00542EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/28 12:00 a.m.12 views

PT-2025-35343

CVE-2025-57845 - Apache HTTP Server Remote Code Execution Vulnerability CVE ID : CVE-2025-57845 Published : Aug. 28, 2025, 3:15 a.m. | 3 hours, 27 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-34158. Reason: This candidate is a reservation...

8.5CVSS6.9AI score0.00544EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-28366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with...

7.5CVSS7AI score0.01321EPSS
SaveExploits0References2
Rows per page
Query Builder