Lucene search
+L

353 matches found

OSV
OSV
•added 2025/08/22 7:01 p.m.•4 views

CGA-P84W-98X7-3HGP

Bulletin has no description...

7.5CVSS7.2AI score0.00548EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/08/22 4:00 p.m.•20 views

CVE-2025-38648

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not NULL before accessing its members. This resolves a warning...

5.5CVSS5.3AI score0.00159EPSS
SaveExploits0
OSV
OSV
•added 2025/08/19 10:43 a.m.•6 views

CGA-R547-XVM6-8853

Bulletin has no description...

7.5CVSS7.2AI score0.00548EPSS
SaveExploits0
OSV
OSV
•added 2025/08/16 9:35 a.m.•2 views

CGA-7PRW-PQ2M-35W3

Bulletin has no description...

6.5CVSS6AI score0.00334EPSS
SaveExploits0
NVD
NVD
•added 2025/08/16 4:16 a.m.•24 views

CVE-2025-7651

The Earnware Connect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ewhasrole' shortcode in all versions up to, and including, 1.0.74 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS0.00306EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr (npm)

The package down-load-available-zip-now-the-world-has-made-me-the-man-of-my-dreams-gqtk0-kllgfr was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/12 9:36 a.m.•5 views

CGA-GJ5H-3W9J-3CGH

Bulletin has no description...

7.2AI score0.00368EPSS
SaveExploits0
OSV
OSV
•added 2025/08/10 8:42 a.m.•2 views

MINI-JXRJ-7V6C-W949

Bulletin has no description...

7.7CVSS7.2AI score0.00498EPSS
SaveExploits0
OSV
OSV
•added 2025/08/10 8:42 a.m.•5 views

MINI-C632-WW8F-34P8

Bulletin has no description...

5.3CVSS7.2AI score0.03458EPSS
SaveExploits0
OSV
OSV
•added 2025/08/10 8:41 a.m.•9 views

MINI-66RG-G9J2-XG9J

Bulletin has no description...

7.5CVSS7.2AI score0.60336EPSS
SaveExploits6
OSV
OSV
•added 2025/08/10 8:41 a.m.•2 views

MINI-4QMM-GQ33-FPX3

Bulletin has no description...

4.3CVSS7.2AI score0.02196EPSS
SaveExploits0
OSV
OSV
•added 2025/08/09 3:15 p.m.•3 views

CGA-PG66-59W5-4G82

Bulletin has no description...

7.2AI score0.00368EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/07/10 11:22 p.m.•7 views

SUSE CVE-2025-38306

In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of haslockedchildren maydecodefh is calling haslockedchildren while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespacesem and are...

4.7CVSS6.4AI score0.0012EPSS
SaveExploits0References9
NVD
NVD
•added 2025/07/10 8:15 a.m.•12 views

CVE-2025-38306

In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of haslockedchildren maydecodefh is calling haslockedchildren while holding no locks. That's an oopsable race... The rest of the callers are safe since they are holding namespacesem and are...

7.8CVSS0.0012EPSS
SaveExploits0References3
CVE
CVE
•added 2025/07/10 7:42 a.m.•86 views

CVE-2025-38306

CVE-2025-38306 concerns the Linux kernel. It describes a race in fs/fhandle.c where may_decode_fh() can call has_locked_children() without holding locks, enabling an oopsable race. The fix renames has_locked_children() to __has_locked_children(), makes it static, and updates callers in fs/namespa...

7.8CVSS6.5AI score0.0012EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2025/07/10 12:00 a.m.•4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a race condition in haslockedchildren that could lead to a null pointer dereference...

4.7CVSS7.9AI score0.0012EPSS
SaveExploits0References4
Snyk
Snyk
•added 2025/06/06 6:42 p.m.•2 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to the evaluation of multiple caveated branches in the schema. An attacker can receive a NOPERMISSION response when a HASPERMISSION response is expected by exploiting the incorrect handling of caveats in...

5.3CVSS7AI score0.00315EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 3:33 a.m.•12 views

CVE-2013-4457

The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation...

6.8CVSS7.7AI score0.01997EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•21 views

kernel: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsockhasdata|hasspace Recent reports have shown how we sometimes call vsockhasdata when a vsock socket has been de-assigned from a transport see attached links, but we shouldn't. Previous commits...

5.5CVSS6.9AI score0.00224EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/03/28 3:38 a.m.•10 views

SUSE CVE-2023-52942

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Fix wrong check in updateparentsubpartscpumask It was found that the check to see if a partition could use up all the cpus from the parent cpuset in updateparentsubpartscpumask was incorrect. As a result, it is...

5.5CVSS6AI score0.00218EPSS
SaveExploits0References3
Rows per page
Query Builder