CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

29291 matches found

CVE•added 2025/08/19 5:03 p.m.•76 views

CVE-2025-38608

CVE-2025-38608 affects the Linux kernel (bpf/ktls). Description from connected docs: when sending plaintext data, ciphertext length was computed initially but not recalculated if plaintext length was later reduced by socket policy, resulting in buffers containing uninitialized data during ciphert...

8.6CVSS7.3AI score0.00389EPSS

SaveExploits0References11Affected Software1

CVE•added 2025/08/19 5:03 p.m.•71 views

CVE-2025-38588

CVE-2025-38588 affects the Linux kernel IPv6 path: an infinite loop in rt6_nlmsg_size() due to list_del_rcu() interactions with rt6_nh structures, potentially causing denial of service. The patch reworks the loop by restarting when f6i->fib6_nsiblings is zero, and kernel live patches/advisorie...

5.5CVSS7.1AI score0.00156EPSS

SaveExploits0References7Affected Software1

Debian CVE•added 2025/08/19 5:03 p.m.•10 views

CVE-2025-38588

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6nlmsgsize While testing prior patch, I was able to trigger an infinite loop in rt6nlmsgsize in the following place: listforeachentryrcusibling, &f6i-fib6siblings, fib6siblings...

5.5CVSS5.3AI score0.00156EPSS

SaveExploits0

OSV•added 2025/08/19 5:02 p.m.•8 views

CVE-2025-38571 sunrpc: fix client side handling of tls alerts

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tlsalertrecv due to its assumption that there is valid data in the msghdr's iterator's kvec. Instead, this patch proposes the...

8.2CVSS6.1AI score

SaveExploits0References8

Debian CVE•added 2025/08/19 5:02 p.m.•19 views

CVE-2025-38571

8.2CVSS5.6AI score0.00325EPSS

SaveExploits0

Cvelist•added 2025/08/19 5:02 p.m.•18 views

CVE-2025-38566 sunrpc: fix handling of server side tls alerts

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS over TLS in tlsalertrecv due to its assumption it can read data from the msg iterator's kvec.. kTLS implementation splits TLS non-da...

9.8CVSS0.00587EPSS

SaveExploits0References5

Debian CVE•added 2025/08/19 5:02 p.m.•22 views

CVE-2025-38562

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generateencryptionkey If client send two session setups with krb5 authenticate to ksmbd, null pointer dereference error in generateencryptionkey could happen. sess-PreauthHashValue is...

5.5CVSS5.3AI score0.07644EPSS

SaveExploits0

Snyk•added 2025/08/19 3:31 p.m.•7 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the message boards feature available through the web interface. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious scripts into messages. Details Cross-sit...

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

Snyk•added 2025/08/19 3:31 p.m.•3 views

Cross-site Scripting (XSS)

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

OSV•added 2025/08/19 3:31 p.m.•16 views

GHSA-22JP-W3CG-GVMM Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13 and 2024.Q1.9 through 2024.Q1.19 allows...

4.6CVSS5.9AI score0.00215EPSS

SaveExploits0References7

Github Security Blog•added 2025/08/19 3:31 p.m.•16 views

Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature

5.4CVSS5.9AI score0.00215EPSS

SaveExploits0References7Affected Software1

Snyk•added 2025/08/19 3:31 p.m.•4 views

Cross-site Scripting (XSS)

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

Snyk•added 2025/08/19 3:31 p.m.•8 views

Cross-site Scripting (XSS)

5.4CVSS5.4AI score0.00215EPSS

SaveExploits0References2

NVD•added 2025/08/19 1:15 p.m.•12 views

CVE-2025-43740

5.4CVSS0.00215EPSS

SaveExploits0References1

OSV•added 2025/08/19 1:15 p.m.•8 views

CVE-2025-43740

5.4CVSS5.7AI score

SaveExploits0References1

Cvelist•added 2025/08/19 1:03 p.m.•16 views

CVE-2025-43740

4.6CVSS0.00215EPSS

SaveExploits0References1

Vulnrichment•added 2025/08/19 1:03 p.m.•7 views

CVE-2025-43740

4.6CVSS6AI score0.00215EPSS

SaveExploits0References1

CVE•added 2025/08/19 1:03 p.m.•24 views

CVE-2025-43740

CVE-2025-43740 is a stored XSS vulnerability in Liferay Portal and Liferay DXP. Affected: Liferay Portal 7.4.3.120–7.4.3.132 and Liferay DXP 2025.Q1.0–Q2.8 (also Q4/Q3/Q2/Q1 2024). The issue allows a remote authenticated attacker to inject JavaScript via the web interface’s message boards feature...

5.4CVSS5.5AI score0.00215EPSS

SaveExploits0References1Affected Software2

OSSF Malicious Packages•added 2025/08/19 2:55 a.m.•7 views

Malicious code in hey-message-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82160038204459189291779030b0cd92dbe157e779d3b1cae48e25a84053ee9a The OpenSSF Package Analysis project identified 'hey-message-content' @ 8.99.1 npm as malicious. It is considered malicious because: - The packa...

6.9AI score

SaveExploits0

OSV•added 2025/08/19 2:55 a.m.•5 views

MAL-2025-41244 Malicious code in hey-message-content (npm)

7.1AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by