Lucene search
+L

8981 matches found

Positive Technologies
Positive Technologies
•added 2025/06/04 12:00 a.m.•22 views

PT-2025-37201

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to RDMA and the hfi1 driver. A divide-by-zero error could occur within the find hw thread mask function due to a division operation where the...

6CVSS6.1AI score0.00176EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/06/03 5:53 a.m.•40 views

CVE-2025-27029 Buffer Over-read in WLAN HAL

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range...

7.5CVSS0.00244EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/02 5:15 a.m.•14 views

CVE-2025-25179

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages...

7.8CVSS5.9AI score0.00137EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/06/02 12:00 a.m.•25 views

QEMU virtqueue_push() Disclosure

The vulnerability of the virtio-scsi, virtio-blk, and virtio-crypt components of the QEMU hardware emulation driver’s virtqueuepush function is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information through the...

3.8CVSS6.4AI score0.00204EPSS
SaveExploits0References7Affected Software3
RedhatCVE
RedhatCVE
•added 2025/06/01 3:36 p.m.•28 views

CVE-2024-23589

Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dictionary attacks efficiently using modern hardware such as GPUs or ASICs...

6.8CVSS6.9AI score0.00147EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/05/31 12:00 a.m.•13 views

Bridging the Gap between Hardware Fuzzing and Industrial Verification

As hardware design complexity increases, hardware fuzzing emerges as a promising tool for automating the verification process. However, a significant gap still exists before it can be applied in industry. This paper aims to summarize the current progress of hardware fuzzing from an industry-use...

6.7AI score
SaveExploits0
CVE
CVE
•added 2025/05/30 3:36 p.m.•64 views

CVE-2024-23589

CVE-2024-23589 concerns HCL Glovius Cloud. The root cause is an outdated hashing algorithm that could allow attackers to guess input data via brute-force or dictionary attacks using GPUs/ASICs. Documented impact per CVSS metrics is high for confidentiality, integrity, and availability, with adjac...

6.8CVSS7.1AI score0.00147EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/30 3:36 p.m.•38 views

CVE-2024-23589 HCL Glovius Cloud is susceptible to an Outdated Hash Algorithm vulnerability

Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dictionary attacks efficiently using modern hardware such as GPUs or ASICs...

6.8CVSS0.00147EPSS
SaveExploits0References1
osv_oesa
osv_oesa
•added 2025/05/30 11:08 a.m.•30 views

OESA-2025-1572 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and...

8.4CVSS6.5AI score0.00314EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2025/05/30 12:00 a.m.•24 views

PT-2025-29028

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the Advanced SoC ASoC Intel audio subsystem where a null pointer dereference could occur during hardware initialization. The avs dai find path...

5.5CVSS5.9AI score0.0014EPSS
SaveExploits0References19
Packet Storm News
Packet Storm News
•added 2025/05/30 12:00 a.m.•13 views

Compact and Selective Disclosure for Verifiable Credentials

Self-Sovereign Identity SSI is a novel identity model that empowers individuals with full control over their data, enabling them to choose what information to disclose, with whom, and when. This paradigm is rapidly gaining traction worldwide, supported by numerous initiatives such as the European...

6.7AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/29 10:49 p.m.•43 views

CVE-2024-45094

IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.5CVSS6.1AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/29 10:49 p.m.•36 views

CVE-2025-2796

On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be...

5.3CVSS6.8AI score0.00195EPSS
SaveExploits0References1
osv_usn
osv_usn
•added 2025/05/29 11:51 a.m.•43 views

USN-7513-5 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - x86 architecture; - Block layer subsystem; - Compute Acceleration Framework; - ACPI drivers;...

10CVSS6.2AI score0.00767EPSS
SaveExploits2References134
osv_mini
osv_mini
•added 2025/05/29 1:09 a.m.•12 views

MINI-HW6V-RVR6-5CHH

Bulletin has no description...

4.9CVSS9.7AI score0.00963EPSS
SaveExploits0
osv_usn
osv_usn
•added 2025/05/28 7:53 a.m.•37 views

USN-7521-3 linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...

9.8CVSS6.8AI score0.37997EPSS
SaveExploits1References229
Packet Storm News
Packet Storm News
•added 2025/05/28 12:00 a.m.•23 views

Transformers for Secure Hardware Systems: Applications, Challenges, and Outlook

The rise of hardware-level security threats, such as side-channel attacks, hardware Trojans, and firmware vulnerabilities, demands advanced detection mechanisms that are more intelligent and adaptive. Traditional methods often fall short in addressing the complexity and evasiveness of modern...

6.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/27 11:25 p.m.•108 views

Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to address following vulnerabilities. Review the Vulnerability Details section below for additional information. CVE-2023-40547 CVSS Base Score:8.3, CVE-2024-5564 CVSS Base Score:8.1, CVE-2022-48624 CVSS Base Score:7.8, CVE-2022-48624 CVSS Bas...

8.6CVSS7.7AI score0.91327EPSS
SaveExploits17Affected Software6
osv_cve
osv_cve
•added 2025/05/27 11:15 p.m.•18 views

CVE-2024-45094

IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.5AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/27 11:15 p.m.•31 views

CVE-2024-45094

IBM DS8900F and DS8A00 Hardware Management Console HMC is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.5CVSS0.00217EPSS
SaveExploits0References1
Rows per page
Query Builder