Lucene search
+L

2611 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:49 a.m.•21 views

CVE-2020-24385

In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the running kernel. During binary interaction, td-tdemuldata in sys/compat/linux/linuxemul.h is not getting initialized an...

5.5CVSS5.7AI score0.00367EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:01 a.m.•25 views

CVE-2023-43870

When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could access the installer batch file or reverse engineer the source code to gain access to the root certificate password. Using the root certificate and password they could then create...

9.8CVSS8.3AI score0.00404EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•8 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000239 advisory. An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the...

6.1CVSS6.7AI score0.00679EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/01/01 10:28 p.m.•30 views

CVE-2025-34469

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

7.5CVSS6.2AI score0.00675EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•17 views

PT-2026-27651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's ATM LANE LAN Emulation module contains a null pointer dereference issue in the lec arp clear vccs function. This flaw occurs when the underlying Virtual Circuit VCC is...

5.5CVSS5.5AI score0.0013EPSS
SaveExploits0
NVD
NVD
•added 2025/12/31 10:15 p.m.•18 views

CVE-2025-34469

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

7.5CVSS0.00675EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/31 9:36 p.m.•48 views

CVE-2025-34469 Cowrie < 2.9.0 Unrestricted wget/curl Emulation Enables SSRF-Based DDoS Amplification

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

6.9CVSS0.00675EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/31 9:36 p.m.•6 views

CVE-2025-34469 Cowrie < 2.9.0 Unrestricted wget/curl Emulation Enables SSRF-Based DDoS Amplification

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

6.9CVSS6.1AI score0.00675EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/31 9:36 p.m.•60 views

CVE-2025-34469

CVE-2025-34469 affects Cowrie before 2.9.0. In emulated shell mode, the wget and curl commands perform real outbound HTTP requests, enabling unauthenticated attackers to generate unbounded traffic to arbitrary targets. This SSRF can turn the Cowrie honeypot into a denial-of-service amplification ...

7.5CVSS6.1AI score0.00675EPSS
SaveIn wildExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/12/31 9:36 p.m.•15 views

CVE-2025-34469 Cowrie < 2.9.0 Unrestricted wget/curl Emulation Enables SSRF-Based DDoS Amplification

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

6.9CVSS6.1AI score
SaveExploits0References7
EUVD
EUVD
•added 2025/12/31 9:36 p.m.•25 views

EUVD-2025-204642

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

6.9CVSS6.2AI score0.00675EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•14 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992777 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insnemulation sysctls emulationprochandler changes...

5.5CVSS5.6AI score0.00247EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/30 12:00 a.m.•5 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992318 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insnemulation sysctls emulationprochandler changes...

5.5CVSS5.6AI score0.00247EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2025/12/27 8:15 p.m.•23 views

AZL-73201 CVE-2025-14180 affecting package php for versions less than 8.3.29-1

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting function...

8.2CVSS6AI score0.00697EPSS
SaveExploits2References1
CVE
CVE
•added 2025/12/27 7:21 p.m.•123 views

CVE-2025-14180

CVE-2025-14180 affects PHP’s PDO PostgreSQL driver when using PDO::ATTR_EMULATE_PREPARES and can cause a NULL return from PQescapeStringConn on certain invalid parameter sequences, leading to a NULL pointer dereference in pdo_parse_params() and potential server crashes. Connected advisories confi...

8.2CVSS6AI score0.00697EPSS
SaveExploits2References1Affected Software1
Packet Storm News
Packet Storm News
•added 2025/12/27 12:00 a.m.•59 views

SCyTAG: Scalable Cyber-Twin for Threat-Assessment Based on Attack Graphs

Understanding the risks associated with an enterprise environment is the first step toward improving its security. Organizations employ various methods to assess and prioritize the risks identified in cyber threat intelligence CTI reports that may be relevant to their operations. Some methodologi...

6.6AI score
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2025/12/24 1:16 p.m.•36 views

UBUNTU-CVE-2023-54116

In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bounds access The fbdev test of IGT may write after EOF, which lead to out-of-bound access for drm drivers with fbdev-generic. For example, run fbdev test on a x86+ast2400 platform, wi...

7.8CVSS6.3AI score0.00164EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/12/24 1:06 p.m.•14 views

CVE-2023-54116 drm/fbdev-generic: prohibit potential out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-generic: prohibit potential out-of-bounds access The fbdev test of IGT may write after EOF, which lead to out-of-bound access for drm drivers with fbdev-generic. For example, run fbdev test on a x86+ast2400 platform, wi...

7.8CVSS6.5AI score
SaveExploits0References6
EUVD
EUVD
•added 2025/12/24 12:30 p.m.•11 views

EUVD-2025-205087

In the Linux kernel, the following vulnerability has been resolved: macintosh/machid: fix race condition in machidtoggleemumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------ cut here ------------ listadd double add:...

6.1AI score0.00198EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/24 11:16 a.m.•21 views

CVE-2025-68367

In the Linux kernel, the following vulnerability has been resolved: macintosh/machid: fix race condition in machidtoggleemumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------ cut here ------------ listadd double add:...

0.00198EPSS
SaveExploits0References8
Rows per page
Query Builder