Lucene search
+L

33230 matches found

Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.13 views

PT-2025-51642

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.104.2-4.azl3 Description The Linux kernel contains a flaw within the tcm loop module. A segmentation fault can occur in the tcm loop tpg address show function if the allocation of tl hba-sh fails during tcm...

4.6CVSS6.2AI score0.00204EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from bmregisterwrite not restoring file write permissions, which could cause subsequent write operations to fail...

6.2AI score0.00197EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/12/16 12:00 a.m.13 views

The vulnerability of the mptcp_schedule_work() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

8CVSS6AI score0.00464EPSS
SaveExploits0References17Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/12/16 12:00 a.m.23 views

The vulnerability in the driver `drivers/input/keyboard/cros_ec_keyb.c` of the built-in keyboard controller for ChromeOS’s EC kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/input/keyboard/croseckeyb.c file of the keyboard driver for the ChromeOS embedded controller EC in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6AI score0.00193EPSS
SaveExploits0References15Affected Software3
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2025-68190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/atom: Check kcalloc for WS buffer in amdgpuatomexecutetablelocked kcalloc may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL...

5.7AI score0.00197EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/15 9:30 p.m.13 views

EUVD-2025-203407

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a machine where OneAgent is installed and receiving a "STATUSLOGONFAILURE" error, the agent will retrieve every user token on the machine and repeatedly attempt to access the netwo...

6.4AI score0.00427EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2025/12/15 8:18 p.m.182 views

Exploit for CVE-2025-65318

PoC for CVE-2025-65318 and CVE-2025-65319 - CVE-2025-65318...

9.3CVSS7.3AI score0.99945EPSS
SaveExploits35
NVD
NVD
added 2025/12/15 7:16 p.m.15 views

CVE-2025-65176

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a machine where OneAgent is installed and receiving a "STATUSLOGONFAILURE" error, the agent will retrieve every user token on the machine and repeatedly attempt to access the netwo...

7.5CVSS0.00427EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/15 2:44 p.m.19 views

CVE-2025-34412

...

6.5AI score0.00075EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/12/15 2:44 p.m.39 views

CVE-2025-34412

...

0.00075EPSS
SaveExploits0
EUVD
EUVD
added 2025/12/15 12:30 p.m.13 views

EUVD-2025-203358

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this...

6.5CVSS6.1AI score0.00479EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/15 12:30 p.m.15 views

GHSA-FV47-PQH6-WXGQ Apache Airflow exposes secret values to authenticated UI users via rendered templates

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this...

6.5CVSS5.8AI score0.00479EPSS
SaveExploits0References7
PyPA
PyPA
added 2025/12/15 12:15 p.m.22 views

PYSEC-2025-86

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted,potentially exposing secrets to users without the appropriate authorization.Users are recommended to upgrade to version 3.1.4, which fixes this...

6.5CVSS5.8AI score0.00479EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.22 views

PT-2026-4322

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw exists in Moodle that allows an attacker with access to the restore interface to trigger server-side execution of arbitrary code. This is caused by inadequate validation of restore inpu...

9CVSS5.7AI score0.0055EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.11 views

The vulnerability of the do_validate_mem() function in the rsrc_nonstatic.c component of the Linux kernel allows a attacker to trigger a service failure.

The vulnerability of the dovalidatemem function in the rsrcnonstatic.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6AI score0.00162EPSS
SaveExploits0References16Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.8 views

The vulnerability of the fs/smb component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fs/smb component in Linux operating systems is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.7AI score0.00147EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.17 views

The vulnerability of the uvcvideo component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the uvcvideo component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS7.2AI score0.00174EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.13 views

The vulnerability of the cpcap-charger component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cpcap-charger component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6AI score0.0016EPSS
SaveExploits0References16Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.12 views

The vulnerability of the netlink component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netlink component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.16 views

The vulnerability of the xusb component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the xusb component in Linux operating systems is related to state management errors. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS7.1AI score0.00167EPSS
SaveExploits0References16Affected Software4
Rows per page
Query Builder