Lucene search
+L

27233 matches found

OSV
OSV
added 2025/07/09 11:15 a.m.11 views

UBUNTU-CVE-2025-38243

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call readoneinode, if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of addinoderef, where we then do...

5.5CVSS5.7AI score0.00145EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/07/09 10:42 a.m.20 views

CVE-2025-38243

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call readoneinode, if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of addinoderef, where we then do...

5.5CVSS5.3AI score0.00145EPSS
SaveExploits0
CVE
CVE
added 2025/07/09 10:42 a.m.60 views

CVE-2025-38243

The CVE-2025-38243 issue affects the Linux kernel’s Btrfs log replay path. In several locations that call read_one_inode(), a NULL inode pointer could be dereferenced (e.g., iput(&inode->vfs_inode) in __add_inode_ref()), causing an invalid memory access and a crash. The available connected doc...

5.5CVSS6.5AI score0.00145EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/07/09 10:42 a.m.26 views

CVE-2025-38243 btrfs: fix invalid inode pointer dereferences during log replay

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call readoneinode, if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of addinoderef, where we then do...

0.00145EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/09 10:42 a.m.9 views

CVE-2025-38243 btrfs: fix invalid inode pointer dereferences during log replay

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call readoneinode, if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of addinoderef, where we then do...

6.5AI score
SaveExploits0References6
CNNVD
CNNVD
added 2025/07/09 12:00 a.m.11 views

Dell PowerFlex Manager VM 日志信息泄露漏洞

Dell PowerFlex Manager VM is a virtual machine software from Dell for managing and monitoring storage systems. A log information disclosure vulnerability exists in Dell PowerFlex Manager VM versions prior to 4.6.2.1. An attacker could exploit this vulnerability to obtain user credentials and then...

6.5CVSS6AI score0.00244EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/09 12:00 a.m.10 views

PT-2025-28957 · Dell · Dell Powerflex Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager VM versions prior to 4.6.2.1 Description: Dell PowerFlex Manager VM is affected by an issue allowing the insertion of sensitive information into log files. A low-privileged attacker with remote access could exploit this...

4.3CVSS6.2AI score0.00244EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/09 12:00 a.m.10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an invalid inode pointer dereference during btrfs log replay...

5.5CVSS6.2AI score0.00145EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/08 11:15 p.m.9 views

CVE-2024-56468

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service...

6.5CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/08 10:41 p.m.22 views

CVE-2024-56468 IBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of service

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 could allow a remote user to cause a denial of service by sending an invalid HTTP request to the log reading service...

7.5CVSS0.00355EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/08 8:15 p.m.7 views

Security Bulletin: IBM InfoSphere Data Replication VSAM for z/OS Remote Source is vulnerable to a denial of service by sending an invalid HTTP request to the log reading service due to CVE-2024-56468.

Summary An invalid HTTP request to the log reading service could lead to a denial of service for IBM InfoSphere Data Replication VSAM for z/OS Remote Source. Vulnerability Details CVEID:CVE-2024-56468 DESCRIPTION: IBM InfoSphere Data Replication VSAM for z/OS Remote Source could allow a remote us...

7.5CVSS6.5AI score0.00355EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/08 4:47 p.m.3 views

CVE-2025-53512 Sensitive log retrieval in Juju

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information...

6.5CVSS6.3AI score0.00322EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/08 4:47 p.m.8 views

CVE-2025-53512 Sensitive log retrieval in Juju

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information...

6.5CVSS6.1AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/07/08 4:47 p.m.19 views

CVE-2025-53512 Sensitive log retrieval in Juju

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information...

6.5CVSS0.00322EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/08 4:15 p.m.15 views

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

5.5CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/08 3:32 p.m.27 views

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

6.5CVSS0.00312EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/08 3:32 p.m.14 views

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

6.5CVSS6.2AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/08 3:32 p.m.43 views

CVE-2025-5464

CVE-2025-5464 affects Ivanti Connect Secure (ICS) versions prior to 22.7R2.8. Affected component is the logging subsystem where sensitive information can be inserted into log files, enabling a local authenticated attacker to disclose that information. The documented remediation is to upgrade to I...

6.5CVSS5.7AI score0.00312EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/07/08 3:15 p.m.15 views

CVE-2025-5463

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information...

5.5CVSS0.00312EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/08 3:15 p.m.12 views

CVE-2025-5463

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information...

5.5CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder