CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2369 matches found

SUSE CVE•added 2025/02/27 3:04 a.m.•8 views

SUSE CVE-2022-49596

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpminsndmss. While reading sysctltcpminsndmss, it can be changed concurrently. Thus, we need to add READONCE to its readers...

5.5CVSS6.5AI score0.00185EPSS

SaveExploits0References3

SUSE CVE•added 2025/02/27 3:03 a.m.•13 views

SUSE CVE-2022-49658

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insufficient bounds propagation from adjustscalarminmaxvals Kuee reported a corner case where the tnum becomes constant after the call to regboundoffset, but the register's bounds are not, that is, its min bounds are sti...

5.5CVSS6.5AI score0.00281EPSS

SaveExploits0References6

CNNVD•added 2025/02/26 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the possibility that sysctltcpminsndmss may be concurrently modified while being read...

4.7CVSS5.9AI score0.00185EPSS

SaveExploits0References6

SUSE Linux•added 2025/02/03 8:50 a.m.•15 views

Security update for unbound

This update for unbound fixes the following issues: Update to 1.20.0: Features: The config for discard-timeout, wait-limit, wait-limit-cookie, wait-limit-netblock and wait-limit-cookie-netblock was added, for the fix to the DNSBomb issue. Merge GH1027: Introduce 'cache-min-negative-ttl' option...

7.5CVSS6.7AI score0.99988EPSS

SaveExploits2References16

SUSE CVE•added 2025/01/20 3:47 a.m.•7 views

SUSE CVE-2025-21639

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rtomin/max: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS7.6AI score0.00228EPSS

SaveExploits0References15

osv-debian•added 2025/01/19 11:15 a.m.•4 views

DEBIAN-CVE-2025-21639

5.5CVSS5.6AI score0.00228EPSS

SaveExploits0References1

NVD•added 2025/01/14 3:15 p.m.•23 views

CVE-2024-39760

Multiple OS command injection vulnerabilities exist in the login.cgi setsysinit functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comman...

10CVSS0.17378EPSS

SaveExploits1References2

CNNVD•added 2025/01/14 12:00 a.m.•23 views

WAVLINK AC3000 命令注入漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A command injection vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which originates from the failure of the restartmin parameter of the adm.cgi schreboot function to correctly filter the constructor command...

9.1CVSS7.8AI score0.03718EPSS

SaveExploits1References2

CNNVD•added 2025/01/14 12:00 a.m.•19 views

WAVLINK AC3000 命令注入漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A command injection vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the restartminvalue parameter of the login.cgi setsysinit function failing to correctly filter the constructor command special...

10CVSS7.8AI score0.17378EPSS

SaveExploits1References2

osv-debian•added 2025/01/13 3:15 p.m.•9 views

DEBIAN-CVE-2024-52333

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS6.9AI score0.00622EPSS

SaveExploits1References1

CVE•added 2025/01/08 3:38 p.m.•105 views

CVE-2024-55656

CVE-2024-55656 (RedisBloom Integer Overflow) affects RedisBloom module used with Redis. The vulnerability occurs in CMS.INITBYDIM when allocating memory for a Count-Min Sketch using user-supplied width/depth, allowing heap memory under-allocation, leading to out-of-bounds read (OOB read) and writ...

8.8CVSS8.5AI score0.17116EPSS

SaveExploits1References1

Positive Technologies•added 2025/01/01 12:00 a.m.•18 views

PT-2025-30818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Squashfs filesystem handling. A Syzkaller report identified a “shift-out-of-bounds” bug occurring when mounting a Squashfs filesystem...

7.8CVSS6.8AI score0.00203EPSS

SaveExploits0

vulnersOsv•added 2024/11/25 6:32 p.m.•2 views

org.keycloak:keycloak-dependencies-server-all (1.9.2.final), org.keycloak:keycloak-dependencies-server-min (1.9.2.final) +2 more potentially affected by CVE-2024-10270 via org.keycloak:keycloak-services (1.9.2.final)

org.keycloak:keycloak-services MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.2.final -...

6.5CVSS0.01245EPSS

SaveExploits0