Lucene search
K

22 matches found

Snyk
Snyk
added 2026/04/08 1:47 p.m.2 views

Incorrect Default Permissions

Amendment This was deemed not a vulnerability. Overview ansible is a simple IT automation system. Affected versions of this package are vulnerable to Incorrect Default Permissions via excessive group-writable permissions on the /etc/passwd file during the build process. An attacker can gain full...

7.1CVSS6AI score0.00004EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/02/19 12:26 a.m.3 views

SUSE CVE-2026-23229

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-c...

5.5CVSS5.7AI score0.0003EPSS
Exploits0References19
NVD
NVD
added 2026/02/18 4:22 p.m.1 views

CVE-2026-23229

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-c...

5.5CVSS0.0003EPSS
Exploits0References9
OSV
OSV
added 2026/02/18 4:22 p.m.2 views

UBUNTU-CVE-2026-23229

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-c...

5.5CVSS5.7AI score0.0003EPSS
Exploits0References6
OSV
OSV
added 2026/02/18 2:53 p.m.2 views

CVE-2026-23229 crypto: virtio - Add spinlock protection with virtqueue notification

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-c...

5.5CVSS5.3AI score0.0003EPSS
Exploits0References11
Cvelist
Cvelist
added 2026/02/18 2:53 p.m.25 views

CVE-2026-23229 crypto: virtio - Add spinlock protection with virtqueue notification

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-c...

0.0003EPSS
Exploits0References8
NVD
NVD
added 2026/02/06 9:16 p.m.3 views

CVE-2026-25634

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Apply int IccTagMPE.cpp. This vulnerability is fixed in 2.3.1....

7.8CVSS0.0002EPSS
Exploits1References5
OSV
OSV
added 2026/02/06 8:21 p.m.2 views

CVE-2026-25634 iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Apply int IccTagMPE.cpp. This vulnerability is fixed in 2.3.1....

7.8CVSS5.4AI score0.0002EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.3 views

PT-2026-6793

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.4 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A stack buffer overlap exists in the CIccTagMultiProcessElement::Apply...

7.8CVSS5.7AI score0.0002EPSS
Exploits1References10
Trellix
Trellix
added 2025/12/18 12:0 a.m.5 views

Amadey Exploiting Self-Hosted GitLab to Distribute StealC

Amadey Exploiting Self-Hosted GitLab to Distribute StealC By Rahul Sharma · December 18, 2025 Executive summary Amadey is a malware loader that has been active since 2018, primarily used to distribute second-stage payloads and infostealers. While Amadey has been previously known to distribute...

7.9AI score
Exploits0
OpenVAS
OpenVAS
added 2024/03/08 12:0 a.m.18 views

Fedora: Security Advisory for frysk (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.46427EPSS
Exploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.16 views

[SECURITY] Fedora 40 Update: frysk-0.4-94.fc40

Frysk is an execution-analysis technology implemented using native Java and C++. It is aimed at providing developers and sysadmins with the ability to both examine and analyze running multi-host, multi-process, multi-threaded systems. Frysk allows the monitoring of running processes and threads, ...

8.8CVSS6.8AI score0.46427EPSS
Exploits3
SUSE CVE
SUSE CVE
added 2023/09/28 1:44 a.m.1 views

SUSE CVE-2023-40660

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...

7.3CVSS6.7AI score0.00037EPSS
Exploits0References5
Kitploit
Kitploit
added 2022/12/05 11:30 a.m.23 views

Scscanner - Tool To Read Website Status Code Response From The Lists

scscanner is tool to read website status code response from the lists. This tool have ability to filter only spesific status code, and save the result to a file. Feature Slight dependency. This tool only need curl to be installed Multi-processing. Scanning will be more faster with multi-processin...

7.5AI score
Exploits0References3
CNNVD
CNNVD
added 2022/02/23 12:0 a.m.1 views

Mlflow 安全漏洞

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow that stems from the product's tempfile.mktemp function failing to properly handle multi-process state. The vulnerability allows an attacker to create a temporary file with the same name. T...

8.2CVSS7.4AI score0.00627EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/05/03 12:0 a.m.1 views

Qualcomm Chipsets 资源管理错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. The intrinsic parts that provide the functionality of Qualcomm devices. A resource management error vulnerability exists in Qualcomm Chipsets, which stems from incorrect memory mapping for handling multiple processes at the same...

8.4CVSS7.7AI score0.0076EPSS
Exploits0References6
OSV
OSV
added 2018/06/11 9:29 p.m.1 views

CVE-2016-9076

An issue where a "" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox 50...

5.9CVSS6.8AI score0.00528EPSS
Exploits0References4
OSV
OSV
added 2018/06/11 9:29 p.m.1 views

CVE-2016-5288

Web content could access information in the HTTP cache if e10s is disabled. This can reveal some visited URLs and the contents of those pages. This issue affects Firefox 48 and 49. This vulnerability affects Firefox 49.0.2...

5.9CVSS6.9AI score
Exploits0References4
The Hacker News
The Hacker News
added 2017/06/18 9:43 p.m.12 views

How to Speed Up Firefox With Multi-Process, If It's Not Working By Default

After years of waiting, Mozilla last week launched Firefox 54 for Windows, Mac, Linux, and Android, with multi-process support — a "major improvement" to improve your browsing experience — but many users are still struggling to take advantage of this feature. Mozilla's multi-process support in...

6.8AI score
Exploits0
The Hacker News
The Hacker News
added 2015/08/24 12:14 a.m.10 views

Mozilla Firefox Launches Web Extensions API to Support Chrome and Opera Extensions

Should we feel happy about it? Let's find out! What Firefox has been thinking of is, it is planning to bring in Google chrome's web browser extensions to support the features of Mozilla Firefox. The parent company of Firefox i. e. Mozilla Foundation has decided to update their add-on and extensio...

6.9AI score
Exploits0
Rows per page
Query Builder