Lucene search
+L

3945 matches found

CNNVD
CNNVD
added 2025/02/26 12:0 a.m.12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the hvinitclocksource function of the hyper-v clock source being incorrectly exported...

5.5CVSS5.4AI score0.00273EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that hvpanicpage may contain sensitive information that should not be dumped to Hyper-V in isolated...

5.5CVSS5.4AI score0.00294EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/02/18 12:0 a.m.12 views

PT-2025-14358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang issue in the kdump kernel has been resolved when running on Hyper-V Gen 2 VMs. The problem occurs when the hyperv fb driver moves the framebuffer to a different MMIO address due t...

7.8CVSS7.6AI score0.65736EPSS
SaveExploits3References669
BDU FSTEC
BDU FSTEC
added 2025/02/18 12:0 a.m.9 views

The vulnerability of the Dell VxRail hyper-converged infrastructure, related to the unencrypted storage of critical information, allows a intruder to disclose protected data.

The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...

7.5CVSS5.5AI score0.00165EPSS
SaveExploits0References3Affected Software1
Information Security Automation
Information Security Automation
added 2025/02/06 4:31 p.m.25 views

About Elevation of Privilege – Windows Hyper-V NT Kernel Integration VSP (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335) vulnerability

About Elevation of Privilege - Windows Hyper-V NT Kernel Integration VSP CVE-2025-21333, CVE-2025-21334, CVE-2025-21335 vulnerability. These three vulnerabilities were disclosed as part of Microsoft's January Patch Tuesday and share the same description. They were found in a component used for...

7.8CVSS7.6AI score0.09798EPSS
SaveExploits6
RedhatCVE
RedhatCVE
added 2025/02/05 7:36 p.m.10 views

CVE-2022-39294

conduit-hyper integrates a conduit application with the hyper server. Prior to version 0.4.2, conduit-hyper did not check any limit on a request's length before calling hyper::body::tobytes. An attacker could send a malicious request with an abnormally large Content-Length, which could lead to a...

7.5CVSS6.5AI score0.00689EPSS
SaveExploits0References1
Veeam
Veeam
added 2025/02/05 12:0 a.m.37 views

Hyper-V Resilient Change Tracking Performance Issues

Challenge General Hyper-V OS performance degradation can occur when using a backup solution to export Hyper-V VM snapshots during backup operations. Solution Based on investigations between Veeam and Microsoft, two underlying causes have been identified. Resilient Change Tracking Resilient Change...

6.8AI score
SaveExploits0
HackRead
HackRead
added 2025/01/22 6:7 p.m.13 views

Cloudflare Mitigates Massive 5.6 Tbps Mirai-Variant DDoS Attack

Cloudflare mitigates a record-breaking 5.6 Tbps DDoS attack, highlighting the growing threat of hyper-volumetric assaults. Learn about the…...

7.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2025/01/22 3:15 p.m.3 views

CVE-2025-23695

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kinlane CtyGrid Hyp3rL0cal Search hyp3rl0cal-city-search allows Reflected XSS.This issue affects CtyGrid Hyp3rL0cal Search: from n/a through = 0.1.1.1...

7.1CVSS7.2AI score0.00383EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/01/17 12:0 a.m.19 views

Microsoft Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V NT Kernel Integration VSP, which can be exploited by an attacker to gain elevated privileges on a system...

7.8CVSS7.2AI score0.09798EPSS
SaveExploits6References1
CNVD
CNVD
added 2025/01/17 12:0 a.m.13 views

Microsoft Windows Hyper-V NT Kernel Integration VSP elevation of privilege vulnerability (CNVD-2025-05240)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. An elevation of privilege vulnerability exists in Microsoft Windows Hyper-V NT Kernel Integration VSP, which can be exploited by an attacker to gain elevated privileges on a system...

7.8CVSS7.2AI score0.01363EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.18 views

The vulnerability of the Dell VxRail hyper-converged infrastructure, related to the unencrypted storage of critical information, allows a intruder to disclose protected data.

The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...

7.5CVSS5.5AI score0.00128EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
added 2025/01/15 5:15 a.m.43 views

3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update

Microsoft kicked off 2025 with a new set of patches for a total of 161 security vulnerabilities across its software portfolio, including three zero-days that have been actively exploited in attacks. Of the 161 flaws, 11 are rated Critical and 149 are rated Important in severity. One other flaw, a...

9.8CVSS10AI score0.80912EPSS
SaveExploits13
BDU FSTEC
BDU FSTEC
added 2025/01/15 12:0 a.m.15 views

The vulnerability of the VSP Elevation function in the hardware virtualization technology of Windows Hyper-V operating systems allows attackers to elevate their privileges to the SYSTEM level.

The vulnerability of the VSP Elevation function in the hardware virtualization layer of Windows Hyper-V operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

7.8CVSS8.1AI score0.09798EPSS
SaveExploits6References4
BDU FSTEC
BDU FSTEC
added 2025/01/15 12:0 a.m.18 views

The vulnerability of the VSP Elevation function in the hardware virtualization technology of Windows Hyper-V operating systems allows attackers to elevate their privileges to the SYSTEM level.

The vulnerability of the VSP Elevation function in the hardware virtualization layer of Windows Hyper-V operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

7.8CVSS7.8AI score0.0153EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/15 12:0 a.m.19 views

The vulnerability of the VSP Elevation function in the hardware virtualization technology of Windows Hyper-V operating systems allows attackers to elevate their privileges to the SYSTEM level.

The vulnerability of the VSP Elevation function in the hardware virtualization layer of Windows Hyper-V operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

7.8CVSS7.8AI score0.01363EPSS
SaveExploits0References2
Krebs on Security
Krebs on Security
added 2025/01/14 10:50 p.m.56 views

Microsoft: Happy 2025. Here’s 161 Security Updates

Microsoft today unleashed updates to plug a whopping 161 security vulnerabilities in Windows and related software, including three "zero-day" weaknesses that are already under active attack. Redmond's inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since...

9.8CVSS8.2AI score0.80912EPSS
SaveExploits12
Rapid7 Blog
Rapid7 Blog
added 2025/01/14 10:12 p.m.78 views

Patch Tuesday - January 2025

Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...

9.8CVSS9.2AI score0.80912EPSS
SaveExploits16
Rapid7 Blog
Rapid7 Blog
added 2025/01/14 10:12 p.m.7 views

Patch Tuesday - January 2025

Microsoft is addressing 161 vulnerabilities this January 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for eight of the vulnerabilities published today, with three listed on CISA KEV. This is now the fourth consecutive month where Microsoft has...

9.8CVSS9.1AI score0.09798EPSS
SaveExploits6
OSV
OSV
added 2025/01/14 6:15 p.m.3 views

CVE-2025-21335

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability...

7.8CVSS7.2AI score0.01363EPSS
SaveExploits0References2
Rows per page
Query Builder