Lucene search
+L

5696 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 7:45 p.m.11 views

CVE-2022-40505

Information disclosure due to buffer over-read in Modem while parsing DNS hostname...

8.2CVSS6.9AI score0.00354EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/02/03 9:17 a.m.1 views

Security update for pam

This update for pam fixes the following issues: CVE-2024-10963: Fixed improper hostname interpretation in pamaccess that could lead to access control bypass bsc1233078. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

8.5CVSS7.3AI score0.00791EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/03 9:17 a.m.11 views

SUSE-SU-2025:20104-1 Security update for pam

This update for pam fixes the following issues: - CVE-2024-10963: Fixed improper hostname interpretation in pamaccess that could lead to access control bypass bsc1233078...

7.4CVSS6.7AI score0.00791EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/01 3:47 a.m.5 views

SUSE CVE-2025-21673

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

6.3CVSS8.1AI score0.004EPSS
SaveExploits0References14
OSV
OSV
added 2025/01/31 12:15 p.m.1 views

DEBIAN-CVE-2025-21673

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

5.5CVSS5.6AI score0.004EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/31 12:15 p.m.5 views

AZL-56409 CVE-2025-21673 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

5.5CVSS6.3AI score0.004EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/31 12:15 p.m.6 views

AZL-56381 CVE-2025-21673 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

5.5CVSS6.3AI score0.004EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/31 12:15 p.m.11 views

CVE-2025-21673

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

9.8CVSS0.004EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/31 12:15 p.m.2 views

UBUNTU-CVE-2025-21673

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

5.5CVSS6.2AI score0.004EPSS
SaveExploits0References16
Vulnrichment
Vulnrichment
added 2025/01/31 11:25 a.m.2 views

CVE-2025-21673 smb: client: fix double free of TCP_Server_Info::hostname

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

9.8CVSS8.1AI score0.004EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/31 11:25 a.m.14 views

CVE-2025-21673 smb: client: fix double free of TCP_Server_Info::hostname

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

9.8CVSS0.004EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.9 views

Software AG webMethods 安全漏洞

Software AG webMethods is Software AG's suite of integration and application development tools used to help organizations with tasks such as application integration, data integration, business process management, and application development. webMethods is designed to help organizations better...

7.5CVSS6.8AI score0.02332EPSS
SaveExploits2References2
Gentoo Linux
Gentoo Linux
added 2025/01/23 12:0 a.m.7 views

libuv: Hostname Truncation

Background libuv is a multi-platform support library with a focus on asynchronous I/O. Description Multiple vulnerabilities have been discovered in libuv. Please review the CVE identifiers referenced below for details. Impact The uvgetaddrinfo function in src/unix/getaddrinfo.c truncates hostname...

7.3CVSS7.5AI score0.02003EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/01/23 12:0 a.m.21 views

GLSA-202501-05 : libuv: Hostname Truncation

The remote host is affected by the vulnerability described in GLSA-202501-05 libuv: Hostname Truncation Multiple vulnerabilities have been discovered in libuv. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

7.3CVSS7.1AI score0.02003EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2025/01/13 12:0 a.m.124 views

Bug fix of NetworkManager

1:1.40.16-18.0.1 - disable MPTCP handling by default Orabug: 35081472 - Fix ignore-carrier logic Orabug: 34956744 - Disable regeneration of the documentation Orabug: 34712048 - add connectivity check via Oracle servers Orabug: 32051972 - Disable the build of NetworkManager-config-connectivity-...

7.6CVSS7.1AI score0.04063EPSS
SaveExploits1
NVD
NVD
added 2025/01/06 6:15 p.m.52 views

CVE-2024-55628

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log...

7.5CVSS0.0068EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.11 views

PT-2025-3790 · Trimble · Trimble Sps851

Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue was found in the Ethernet Configuration Menu component of the affected software. The manipulation of the Hostname argument leads to cross-site scripting. It is possible to initiat...

5.1CVSS6.5AI score0.00406EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/01/05 12:0 a.m.7 views

Trimble SPS851 代码注入漏洞

The Trimble SPS851 is a modular GPS receiver from Trimble. A code injection vulnerability exists in the Trimble SPS851 version 488.01, which stems from the parameter Hostname of the component Ethernet Configuration Menu that leads to cross-site scripting...

5.1CVSS4.2AI score0.00406EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/27 11:49 a.m.7 views

CLSA-2024-1735300164 pam: Fix of CVE-2024-10963

CVE-2024-10963: pamaccess: rework resolving of tokens as hostname...

7.4CVSS6.9AI score0.00791EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/12/19 8:0 a.m.6 views

Pam: improper hostname interpretation in pam_access leads to access control bypass

...

7.4CVSS6.8AI score0.00791EPSS
SaveExploits0
Rows per page
Query Builder