Lucene search
+L

9435 matches found

ATTACKERKB
ATTACKERKB
added 2025/08/16 10:55 a.m.7 views

CVE-2025-38518

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/16 12:0 a.m.7 views

PT-2025-33561 · Amd +1 · Amd Cyan Skillfish +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue related to the handling of TLB flushes using INVLPGB on AMD Cyan Skillfish processors Family 17h, Model 47h, Stepping 0h. This can lead to system...

6AI score0.00127EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/13 5:26 p.m.6 views

CVE-2025-5819 Incorrect Permission Assignment for Critical Resource in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances...

5CVSS6.3AI score
SaveExploits0References5
Circl
Circl
added 2025/08/13 5:25 a.m.6 views

CVE-2025-537267

creationtimestamp| type| source ---|---|--- 2025-08-13 05:25:08+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0251...

7.3AI score
SaveExploits0References1
FreeBSD
FreeBSD
added 2025/08/13 12:0 a.m.9 views

Gitlab -- vulnerabilities

Gitlab reports: Cross-site scripting issue in blob viewer impacts GitLab CE/EE Cross-site scripting issue in labels impacts GitLab CE/EE Cross-site scripting issue in Workitem impacts GitLab CE/EE Improper Handling of Permissions issue in project API impacts GitLab CE/EE Incorrect Privilege...

8.7CVSS6.9AI score0.00453EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/12 2:12 p.m.3 views

MINI-F7RW-MW2G-5H9H

Bulletin has no description...

7CVSS7.2AI score0.00355EPSS
SaveExploits0
Circl
Circl
added 2025/08/12 8:14 a.m.11 views

CVE-2025-8418

creationtimestamp| type| source ---|---|--- 2025-08-12 08:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6ujvkyea2e 2025-08-22 07:15:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/48628 2025-08-22 15:00:05+00:00| published-proof-of-concept|...

8.8CVSS4.8AI score0.00587EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-4093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger...

8.8CVSS6.7AI score0.00419EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/11 6:36 p.m.2 views

CVE-2025-7679 Session ID Basic Auth Bypass

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT...

9.2CVSS6.3AI score0.00443EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2025/08/11 1:18 p.m.9 views

Online portal exposed car and personal data, allowed anyone to remotely unlock cars

A carmaker’s online dealership portal has been found leaking the private information and vehicle data of its customers. This also meant that anyone with access could remotely break into a car. Researcher Eaton Zveare shared his discovery with TechCrunch. Although he said he has chosen not to...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:0 a.m.14 views

The vulnerability of the application software of the Central Medical Information System of the State Health Information System (GIS SZ), related to the unencrypted storage of critical information, allows a perpetrator to disclose identification data.

The vulnerability of the application software of the Central Medical Information System of the State Health Information System GIS SZ is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose identification data...

7.8CVSS5.5AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/10 4:29 p.m.18 views

CVE-2025-46414

The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, which may allow an attacker to gain unauthorized access using brute-force methods if they possess a valid device serial number. The API provides clear feedback when the correct PIN i...

9.2CVSS7.3AI score0.0035EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-42119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can not be used as an array index. Plus, it also means it is...

7.8CVSS6.5AI score0.00281EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-37751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at the...

7.1CVSS5.6AI score0.00152EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/09 3:15 p.m.5 views

CGA-PWQ6-RM34-P98W

Bulletin has no description...

7CVSS7.2AI score0.00355EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-49789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong type of integer in 'zfcpfsfreqsend' to cache the FSF request ID when...

7.8CVSS6.5AI score0.0019EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/08 6:2 p.m.2 views

CVE-2025-8734

...

4AI score0.00019EPSS
SaveExploits0
Circl
Circl
added 2025/08/08 10:34 a.m.16 views

CVE-2025-8580

creationtimestamp| type| source ---|---|--- 2025-08-08 10:34:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3lvv2ihpdt42u...

4.3CVSS4.6AI score0.00234EPSS
SaveExploits0References1
Circl
Circl
added 2025/08/08 7:40 a.m.16 views

CVE-2024-58255

creationtimestamp| type| source ---|---|--- 2025-08-08 07:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvuqslrtq42p...

6.7CVSS4.8AI score0.0029EPSS
SaveExploits0References1
Circl
Circl
added 2025/08/08 7:35 a.m.8 views

CVE-2025-6572

creationtimestamp| type| source ---|---|--- 2025-08-08 07:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvuqjmzpgd2d...

5.9CVSS6.5AI score0.00182EPSS
SaveExploits0References1
Rows per page
Query Builder