Lucene search
+L

18648 matches found

CNNVD
CNNVD
added 2025/12/30 12:0 a.m.12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from f2fs not properly checking for a multi-device read-only condition, which could lead to a null pointer dereferenc...

5.8AI score0.00133EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992492 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must n...

7.8CVSS6.1AI score0.0017EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.9 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992605 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found...

7.8CVSS6.1AI score0.0017EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.5 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992477 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: put dlstid if fail to queue dlrecall Before calling nfsd4runcb to queue dlrecall to the...

7.5CVSS6.2AI score0.00534EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.9 views

Ksenia Security Lares 4.0 Home Automation 安全漏洞

Ksenia Security Lares 4.0 Home Automation is an intelligent security and home automation control platform from Ksenia Security, Italy. A security vulnerability exists in Ksenia Security Lares 4.0 Home Automation version 1.6, which originates from an unprotected endpoint, and could allow an...

9.8CVSS7.3AI score0.0045EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.18 views

PT-2025-54261

Name of the Vulnerable Software and Affected Versions Ksenia Security Lares 4.0 Home Automation version 1.6 Description An authenticated attacker can upload MPFS File System binary images through an unprotected endpoint. This allows overwriting flash program memory and potentially executing...

9.8CVSS7.3AI score0.0045EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a credential leak in the nfs4discovertrunking function in the NFSv4 subsystem...

5.8AI score0.00178EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.21 views

PT-2025-54023

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel experienced an issue where memory allocation failed for the exFAT file system due to system memory fragmentation. This occurred when using kmalloc array and kfree,...

5.9AI score0.00186EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992314 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on destination blkaddr during recovery As Wenqing Liu reported in...

5.5CVSS5.2AI score0.00156EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/29 9:15 p.m.8 views

CVE-2025-15205

A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istoreid leads to sql injection. The attack can be initiated remotely. The exploit is publicly...

8.8CVSS5.8AI score0.00313EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/26 7:15 a.m.8 views

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

6.7CVSS0.002EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/26 7:15 a.m.7 views

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

6.7CVSS6.2AI score0.002EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/26 6:53 a.m.22 views

CVE-2025-59888

Summary of findings (CVE-2025-59888) : The Eaton UPS Companion installer contains an vulnerability due to an improper quotation in search paths. Multiple connected sources confirm the issue affects the Eaton UPS Companion software installer and can enable arbitrary code execution when an attacker...

6.7CVSS7.2AI score0.002EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/26 6:53 a.m.3 views

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

6.7CVSS7.2AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/26 6:53 a.m.29 views

CVE-2025-59888

Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This security issue has been fixed in the latest version of EUC which is available on the Eaton download center...

6.7CVSS0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/26 12:0 a.m.12 views

PT-2025-53453

Name of the Vulnerable Software and Affected Versions Eaton UPS Companion affected versions not specified Description A flaw exists in the Eaton UPS Companion software installer related to improper handling of quotation marks in search paths. This could allow an attacker with file system access t...

6.7CVSS6.8AI score0.002EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/12/26 12:0 a.m.6 views

Eaton UPS Companion 安全漏洞

Eaton UPS Companion is a power management software from Eaton Corporation USA. A security vulnerability exists in Eaton UPS Companion that stems from an improperly referenced search path that could lead to the execution of arbitrary code by an attacker with file system access...

6.7CVSS7.3AI score0.002EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.7 views

CVE-2023-53990

In the Linux kernel, the following vulnerability has been resolved: SMB3: Add missing locks to protect deferred close file list cifsdeldeferredclose function has a critical section which modifies the deferred close file list. We must acquire deferredlock before calling cifsdeldeferredclose functi...

5.5CVSS5.9AI score0.00137EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/25 10:44 a.m.30 views

CVE-2023-54021

In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4mbnormalizerequest We need to set acgex to notify the goal start used in ext4mbfindbygoal. Set acgex instead of acfex in ext4mbnormalizerequest. Besides we should assure goal start is in rang...

5.5CVSS5.8AI score0.00175EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2025/12/25 9:2 a.m.7 views

NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

...

7.5CVSS5.4AI score0.00614EPSS
SaveExploits0
Rows per page
Query Builder