Lucene search
+L

2064 matches found

attackerkb
attackerkb
•added 2026/01/13 3:29 p.m.•5 views

CVE-2025-68788

In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users with no read access to a file to subscribe to events e.g. INACCESS/INMODIFY, but they do allow the same user to subscri...

5.3AI score0.00212EPSS
SaveExploits0References8Affected Software1
AstraLinux
AstraLinux
•added 2026/01/13 2:01 p.m.•8 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ceph: Fixed a race condition that occurred during the validation of rparent before applying state changes. Validation was added to ensure that the cached parent directory inode matches the information in MDS responses. This...

7.8CVSS6.1AI score0.00113EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 12:37 p.m.•13 views

CVE-2023-49986

A cross-site scripting XSS vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

4.7CVSS5.8AI score0.00471EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:23 a.m.•9 views

CVE-2021-31876

Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes it easier for attackers to trigger a loss of funds, or a denial of service attack against downstream projects such as Lightning network nodes. An unconfirmed child transaction wi...

6.5CVSS6.5AI score0.01608EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:52 a.m.•16 views

CVE-2022-42171

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo...

9.8CVSS9.4AI score0.00992EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/08 12:15 a.m.•20 views

CVE-2019-25282

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect...

9.8CVSS0.00425EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•1 views

CVE-2019-25282: URL Redirection to Untrusted Site

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect...

9.8CVSS5.9AI score0.00425EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/07 11:10 p.m.•50 views

CVE-2019-25282 V-SOL GPON/EPON OLT Platform V2.03.62R_IPv6 v2.03 Open Redirect via bindProfile.html

V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to manipulate the 'parent' GET parameter. Attackers can craft malicious links that redirect logged-in users to arbitrary websites by exploiting improper input validation in the redirect...

9.8CVSS0.00425EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/07 11:10 p.m.•28 views

CVE-2019-25282

Summary of CVE-2019-25282 (V-SOL GPON/EPON OLT Platform) The issue is an open redirect vulnerability in the bindProfile.html script of V-SOL GPON/EPON OLT Platform, affecting versions 2.03 and 2.03.62R IPv6. The root cause is improper validation of the GET parameter named parent , allowing an att...

9.8CVSS6.5AI score0.00425EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•12 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000242 advisory. In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship,...

7.8CVSS6.8AI score0.52199EPSS
SaveExploits22References4
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•5 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000447)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000447 advisory. A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because execid in include/linux/sched.h is only 32 bits, an...

5.3CVSS6.8AI score0.00706EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/05 3:54 p.m.•14 views

CLSA-2026-1767628458 curl: Fix of CVE-2024-9681

CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries...

6.5CVSS6.8AI score0.01987EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•8 views

PT-2026-1246

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel related to LED Backlight devices and devlink handling. Specifically, when an LED device acts as a supplier, the devlink creation process may incorrect...

4.6CVSS6.2AI score0.00193EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•37 views

PT-2026-43782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Corrupted FAT images can cause a directory inode to have an incorrect i nlink value. When the rmdir operation is performed, it unconditionally calls the drop nlink function, which can...

9.8CVSS5.5AI score0.00162EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/31 3:23 p.m.•10 views

CVE-2023-54264

In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sbgetblkinode-isb, parent return a null ptr and taking lock on that leads to the null-ptr-deref bug...

5.5CVSS5.8AI score0.00211EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/12/31 12:52 p.m.•18 views

CVE-2023-54183

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink If fwnodegraphgetremoteendpoint fails, 'fwnode' is known to be NULL, so fwnodehandleput is a no-op. Release the reference taken from a previous...

5.8AI score0.00219EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992910)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992910 advisory. In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually...

4.7CVSS6.1AI score0.0016EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/30 3:30 p.m.•18 views

EUVD-2023-60458

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink If fwnodegraphgetremoteendpoint fails, 'fwnode' is known to be NULL, so fwnodehandleput is a no-op. Release the reference taken from a previous...

5.9AI score0.00219EPSS
SaveExploits0References9
OSV
OSV
•added 2025/12/30 1:16 p.m.•15 views

UBUNTU-CVE-2023-54183

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink If fwnodegraphgetremoteendpoint fails, 'fwnode' is known to be NULL, so fwnodehandleput is a no-op. Release the reference taken from a previous...

5.7AI score0.00219EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2025/12/30 1:16 p.m.•20 views

CVE-2023-54183

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink If fwnodegraphgetremoteendpoint fails, 'fwnode' is known to be NULL, so fwnodehandleput is a no-op. Release the reference taken from a previous...

5.7AI score0.00219EPSS
SaveExploits0References10
Rows per page
Query Builder