Lucene search
+L

5943 matches found

Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•19 views

PT-2026-38957

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nSVM component where a user-triggerable warning occurs in the svm set nested state function when nested svm load cr3 fails. This condition can be easily...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/13 8:02 p.m.•19 views

CVE-2025-12084

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents. Mitigation Mitigation for this issue is either not available or the currently...

7.5CVSS6.5AI score0.00799EPSS
SaveExploits0References5
Veracode
Veracode
•added 2025/12/13 7:33 a.m.•32 views

Denial Of Service (DoS)

urllib3 is vulnerable to a Denial-Of-Service DoS. The vulnerability is due to an unbounded decompression chain, where nested compression layers are not limited, allowing a malicious server to send specially crafted responses that trigger excessive CPU usage and large memory allocation during...

8.9CVSS6.8AI score0.00682EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
•added 2025/12/11 12:00 a.m.•7 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991130 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Prevent nested device-reset calls Automatic kernel fuzzing revealed a recursive lockin...

5.5CVSS5.9AI score0.00183EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/11 12:00 a.m.•28 views

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2501)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...

9.8CVSS5.9AI score0.00644EPSS
SaveExploits4References126
vulnersOsv
vulnersOsv
•added 2025/12/10 6:30 p.m.•1 views

javagh.jenkins:mashup-portlets-plugin (>=0.9, <=1.0.3), org.jenkins-ci.main:jenkins-test-harness (1.526) +10 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.526)

org.jenkins-ci.main:jenkins-core MAVEN version 1.526 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - javagh.jenkins:mashup-portlets-plugin =0.9, =4.2.2, =1.0.1, =1.12, =1.526, =0.5, =1.4, =1.9.1...

4.3CVSS6.2AI score0.00247EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/10 9:32 a.m.•35 views

CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

7CVSS5.7AI score0.00191EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/12/10 12:00 a.m.•18 views

Linux IOMMU DoS

The vulnerability of the drivers/iommu/intel/iommu.c, rivers/iommu/intel/iommu.h, and drivers/iommu/intel/nested.c modules in the Linux operating system arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause ...

7CVSS7.8AI score0.00173EPSS
SaveExploits0References8Affected Software5
GithubExploit
GithubExploit
•added 2025/12/09 9:21 a.m.•184 views

Exploit for CVE-2025-66478

monorepo-nextjs-npm-nested-versions - VULNERABLE CVE-2025-664...

7.5AI score
SaveExploits113
RedHat Linux
RedHat Linux
•added 2025/12/09 7:23 a.m.•19 views

libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...

7.5CVSS6.9AI score0.01353EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/12/09 12:29 a.m.•11 views

SUSE CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

5.1CVSS5.5AI score0.00191EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/09 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2023-53756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of...

5.6AI score0.00191EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/08 3:13 p.m.•17 views

Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to cause a denial of service CVE-2025-53864

Summary Connect2id Nimbus JOSE + JWT is used by the IBM Datapower Operations Dashboard for Javascript Object Signing and Encryption Vulnerability Details CVEID:CVE-2025-53864 DESCRIPTION: Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause ...

5.8CVSS6.4AI score0.00981EPSS
SaveExploits0Affected Software1
osv_debian
osv_debian
•added 2025/12/08 2:15 a.m.•12 views

DEBIAN-CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

5.7AI score0.00191EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/12/08 2:15 a.m.•22 views

UBUNTU-CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

5.5AI score0.00191EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/12/08 1:19 a.m.•37 views

CVE-2023-53756 KVM: VMX: Fix crash due to uninitialized current_vmcs

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

0.00191EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/12/08 1:19 a.m.•18 views

CVE-2023-53756 KVM: VMX: Fix crash due to uninitialized current_vmcs

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

6.3AI score
SaveExploits0References8
Debian CVE
Debian CVE
•added 2025/12/08 1:19 a.m.•23 views

CVE-2023-53756

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

5.7AI score0.00191EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•3 views

CVE-2023-53756: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

5.5AI score0.00191EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•17 views

PT-2025-49486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM component, specifically related to nested hypervisor operation on Hyper-V. The issue stems from an uninitialized current vmcs variable...

5.7AI score0.00191EPSS
SaveExploits0References20
Rows per page
Query Builder