Lucene search
+L

6851 matches found

Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•22 views

PT-2025-15842 · National Instruments · Ni Labview

Name of the Vulnerable Software and Affected Versions: NI LabVIEW versions prior to 2025 Q1 Description: The issue is an out of bounds write vulnerability due to improper bounds checking in the InitCPUInformation function. This may result in information disclosure or arbitrary code execution...

8.5CVSS7.5AI score0.00202EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•19 views

The vulnerability of the `init_imlib_fonts()` function in the Imlib image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the initimlibfonts function in the Imlib image processing library is related to the failure of the operation outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause servic...

10CVSS7.9AI score0.00659EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•17 views

The vulnerability of the Cloud-init configuration tool, related to insufficient protection of registration data, allows a perpetrator to access confidential information.

The vulnerability of the Cloud-init configuration tool is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

5.5CVSS6.3AI score0.00236EPSS
SaveExploits0References6Affected Software3
osv-azl
osv-azl
•added 2025/04/08 9:15 a.m.•24 views

AZL-59772 CVE-2025-22014 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

5.5CVSS6.6AI score0.00163EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2025/04/07 8:15 p.m.•10 views

DEBIAN-CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.7AI score0.00239EPSS
SaveExploits1References1
osv-azl
osv-azl
•added 2025/04/07 8:15 p.m.•16 views

AZL-61765 CVE-2025-29481 affecting package pcp 6.3.2-1

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.6AI score0.00239EPSS
SaveExploits1References1
osv-azl
osv-azl
•added 2025/04/07 8:15 p.m.•19 views

AZL-59745 CVE-2025-29481 affecting package bcc for versions less than 0.29.1-3

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.6AI score0.00239EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2025/04/07 8:15 p.m.•13 views

CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS6AI score0.00239EPSS
SaveExploits1References2
osv-ubuntu
osv-ubuntu
•added 2025/04/07 1:15 p.m.•17 views

UBUNTU-CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

6.2CVSS6.5AI score0.00204EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•7 views

PT-2025-27741

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the mt7996 mmio wed init function. This issue arises because devm ioremap returns NULL on erro...

5.5CVSS6AI score0.00165EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/07 12:00 a.m.•10 views

PT-2025-27740

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been identified in the mt7915 mmio wed init function. The devm ioremap function returns NULL on error, but mt7915 mmio wed init does not check for...

7CVSS6.4AI score0.00167EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/04/07 12:00 a.m.•12 views

libbpf 安全漏洞

libbpf is a libbpf open source user-space library/ API for loading and interacting with BPF programs. A security vulnerability exists in libbpf version 1.5.0, which originates from a buffer overflow that can be exploited by a local attacker to execute arbitrary code via the bpfobjectinitprog...

6.2CVSS8.3AI score0.00239EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/04/07 12:00 a.m.•19 views

Vulnerability of the bpf_test_init() function (net/bpf/test_run.c) in the Linux operating system kernel, which allows an attacker to escalate their privileges

The vulnerability of the bpftestinit function net/bpf/testrun.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.8CVSS6.4AI score0.00207EPSS
SaveExploits0References19Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/04/07 12:00 a.m.•22 views

The vulnerability of the functions intel_iommu_init() (drivers/iommu/intel/iommu.c) and enable_drhd_fault_handling() (drivers/iommu/intel/dmar.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the functions inteliommuinit drivers/iommu/intel/iommu.c and enabledrhdfaulthandling drivers/iommu/intel/dmar.c in the Linux kernel is related to insufficient locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00212EPSS
SaveExploits0References12Affected Software5
SUSE CVE
SUSE CVE
•added 2025/04/05 2:25 a.m.•20 views

SUSE CVE-2025-21966

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corruptbiobyte feature Fix memory corruption due to incorrect parameter being passed to bioinit...

5.5CVSS7.8AI score0.00197EPSS
SaveExploits0References16
osv-oesa
osv-oesa
•added 2025/04/03 11:08 a.m.•15 views

OESA-2025-1372 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cacheshow The function cshow was called with protection from RCU. This only ensures that cp will not be freed...

7.8CVSS6.9AI score0.00891EPSS
SaveExploits3References38
osv-oesa
osv-oesa
•added 2025/04/03 11:08 a.m.•15 views

OESA-2025-1363 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Erlang/OTP is a set of libraries for the Erlang...

7.5CVSS6.8AI score0.00462EPSS
SaveExploits0References2
osv-oesa
osv-oesa
•added 2025/04/03 11:08 a.m.•13 views

OESA-2025-1364 erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson. Security Fixes: Erlang/OTP is a set of libraries for the Erlang...

7.5CVSS6.8AI score0.00462EPSS
SaveExploits0References2
Fedora
Fedora
•added 2025/04/03 1:52 a.m.•21 views

[SECURITY] Fedora 40 Update: corosync-3.1.9-2.fc40

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

9.8CVSS7.3AI score0.00469EPSS
SaveExploits1
Fedora
Fedora
•added 2025/04/03 1:37 a.m.•21 views

[SECURITY] Fedora 41 Update: corosync-3.1.9-2.fc41

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

9.8CVSS7.3AI score0.00469EPSS
SaveExploits1
Rows per page
Query Builder