Lucene search
+L

14058 matches found

Positive Technologies
Positive Technologies
•added 2025/02/22 12:00 a.m.•18 views

PT-2025-7665 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: ndpi free flow data, ndpi flow free, and process ndpi...

6.9AI score
SaveExploits0References2
OSV
OSV
•added 2025/02/20 6:12 p.m.•19 views

CLSA-2025-1740075135 kernel: Fix of 4 CVEs

media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - btrfs: fix use-after-free when COWing tree bock and tracing is...

7.8CVSS7AI score0.03395EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/20 12:00 a.m.•5 views

PT-2025-7564

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version V16.03.34.06 Description A stack overflow issue was discovered in the function get parentControl list Info via the urls parameter. This issue affects the Tenda AC8V4 router firmware. Recommendations For Tenda AC8V4 version...

9.8CVSS0.00572EPSS
SaveExploits1References8
Circl
Circl
•added 2025/02/18 9:11 p.m.•21 views

CVE-2024-27227

creationtimestamp| type| source ---|---|--- 2025-02-18 21:11:31+00:00| seen| Telegram/kgQkjtHgJyeVIS88btYKpmhwrfE1ZPfqNK6P5-yTTYjKwU...

9.8CVSS4.8AI score0.0032EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/18 12:00 a.m.•8 views

PT-2025-7784

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A stored XSS risk was identified in the drag-and-drop onto image ddimageortext question type, which required additional sanitizing. Recommendations At the moment, there is no information about...

6.1CVSS3.4AI score0.00289EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2025/02/15 12:00 a.m.•11 views

PT-2025-7261 · Git +1 · Wavpack

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a crash type of Object-size. The crash state involves the functions unpack dsd samples and unpack samples worker thread. No information is available about the...

6.9AI score
SaveExploits0References2
OSV
OSV
•added 2025/02/14 11:08 a.m.•7 views

OESA-2025-1111 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock A deadlock may happen since the i3cmasterregister acquires &i3cbus-lock twice. Se...

7.8CVSS5.8AI score0.00772EPSS
SaveExploits1References33
OSV
OSV
•added 2025/02/14 11:08 a.m.•17 views

OESA-2025-1110 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock A deadlock may happen since the i3cmasterregister acquires &i3cbus-lock twice. Se...

7.8CVSS5.8AI score0.00772EPSS
SaveExploits1References37
OSV
OSV
•added 2025/02/14 9:36 a.m.•27 views

CLSA-2025-1739525795 kernel: Fix of 24 CVEs

media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - wifi: ath9k: add range check for connrspepid in htcconnectservice CVE-2024-53156 - xsk: fix OOB map writes when deleting elements CVE-2024-56614 - hvsock: Initializing vsk-trans to NULL to prevent a...

9.8CVSS7.1AI score0.03395EPSS
SaveExploits2References1
Circl
Circl
•added 2025/02/12 7:07 p.m.•16 views

CVE-2025-0998

creationtimestamp| type| source ---|---|--- 2025-02-12 19:07:27+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113992482587961618 2025-02-14 23:26:21+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3li6e2carvs2w 2025-02-15 01:30:42+00:00| seen|...

7.7AI score
SaveExploits0References8
Circl
Circl
•added 2025/02/12 5:52 p.m.•8 views

GHSA-3MVX-QW4R-FCQF

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187494675681...

7.2AI score
SaveExploits0References1
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•9 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: hfs: fixed the issue where fields of hfs inodeinfo were initialized after hfsallocinode Syzbot reports an issue with accessing uninitialized values as follows: loop0: detected a change in capacity from 0 to 64...

7.8CVSS6.4AI score0.00284EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not trigger BUGON due to ENOMEM from btrfslookupextentinfo in walkdownproc. We have properly handled errors here. ENOMEM is not fatal; we return the error instead...

5.5CVSS6.1AI score0.00245EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•10 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Ensure that the fwinfo is not null before using it. This resolves the warning regarding the dereference of a null return value reported by Coverity...

5.5CVSS6.2AI score0.0025EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevented kernel-usb-infoleak. The syzbot reported a kernel-usb-infoleak in usbtmcwrite; we need to clear the structure before filling the fields...

5.5CVSS6.2AI score0.00222EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fixed potential integer overflows. The 64-bit argument for the “get DIMM info” SMC call consists of memctrlidx, which is left-shifted by 16 bits and OR-ed with the DIMM index. Since memctrlidx is defined as a 32-b...

5.5CVSS6.1AI score0.00229EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•12 views

PT-2025-6183 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a vulnerability notification. No further details are provided about the nature of the issue, potentially affected device...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•22 views

PT-2025-6682 · Intel · Intel Gpa +1

Name of the Vulnerable Software and Affected Versions: IntelR GPA and IntelR GPA Framework affected versions not specified Description: The issue concerns incorrect default permissions for some software installers, potentially allowing an authenticated user to enable escalation of privilege via...

6.7CVSS7.1AI score0.00162EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/10 12:00 a.m.•10 views

PT-2025-19694 · Opensuse +1 · Rsync

Name of the Vulnerable Software and Affected Versions: rsync affected versions not specified Description: This issue involves rsync. An update bumps the rsync protocol version to 32 to indicate the server has been patched against recent issues. Recommendations: At the moment, there is no...

6.9AI score
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2025/02/07 9:57 a.m.•5 views

Security update for rsync

This update for rsync fixes the following issues: Bump protocol version to 32 - make it easier to show server is patched. Fix FLAGGOTDIRFLIST collission with FLAGHLINKED Security update,CVE-2024-12747, bsc1235475 race condition in handling symbolic links Security update, fix multiple...

9.8CVSS7.5AI score0.72059EPSS
SaveExploits8References24
Rows per page
Query Builder