Lucene search
K

6646 matches found

NVD
NVD
added 2025/03/27 2:15 p.m.7 views

CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS0.00037EPSS
Exploits0References3
OSV
OSV
added 2025/03/27 2:15 p.m.1 views

UBUNTU-CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS6.5AI score0.00037EPSS
Exploits0References15
OSV
OSV
added 2025/03/27 1:38 p.m.4 views

CVE-2025-21869 powerpc/code-patching: Disable KASAN report during patching via temporary mm

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS5.9AI score0.00037EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/03/27 1:38 p.m.4 views

CVE-2025-21869

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

7.8CVSS5.7AI score0.00037EPSS
Exploits0
CVE
CVE
added 2025/03/27 1:38 p.m.105 views

CVE-2025-21869

Summary: CVE-2025-21869 is tied to a Linux kernel PowerPC code-patching issue where KASAN reports could trigger during patching on certain hardware (Talos II with kernel 6.13). Root cause: patching instructions could write into user-address-space memory under KASAN instrumentation, causing a KASA...

7.8CVSS6.8AI score0.00037EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/03/27 1:38 p.m.5 views

CVE-2025-21869 powerpc/code-patching: Disable KASAN report during patching via temporary mm

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

0.00037EPSS
Exploits0References3
Openbugbounty
Openbugbounty
added 2025/03/27 3:15 a.m.3 views

east-view-self-catering.island-mahe-hotels.com Cross Site Scripting vulnerability OBB-4040694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from disabling KASAN reporting during patching via temporary mm, which could lead to user memory access...

7.8CVSS6.5AI score0.00037EPSS
Exploits0References5
Openbugbounty
Openbugbounty
added 2025/03/26 6:5 p.m.8 views

archives.realvail.com Cross Site Scripting vulnerability OBB-4040635

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2025/03/26 5:39 p.m.1 views

anzenbergergallery-bookshop.com Cross Site Scripting vulnerability OBB-4040508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Amazon
Amazon
added 2025/03/26 12:0 a.m.2 views

Important: kernel-livepatch-5.10.234-225.910

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts CVE-2025-21647 Affected Packages: kernel-livepatch-5.10.234-225.910 Issue Correction: Please ensure you have live patching enabled. Run yum updat...

7.1CVSS6.7AI score0.00022EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/03/26 12:0 a.m.17 views

Microsoft Windows Multiple Vulnerabilities (KB5050009)

This host is missing an important security update according to Microsoft KB5050009 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.2AI score0.79693EPSS
Exploits12References3
Cvelist
Cvelist
added 2025/03/25 10:55 p.m.13 views

CVE-2025-30219 RabbitMQ has XSS Vulnerability in an Error Message in Management UI

RabbitMQ is a messaging and streaming broker. Versions prior to 4.0.3 are vulnerable to a sophisticated attack that could modify virtual host name on disk and then make it unrecoverable with other on disk file modifications can lead to arbitrary JavaScript code execution in the browsers of...

6.1CVSS0.00023EPSS
Exploits0References1
Chainguard
Chainguard
added 2025/03/22 4:12 a.m.6 views

GHSA-99JH-QMJR-PM5J vulnerabilities

Vulnerabilities for packages: samba...

7.5AI score
Exploits0
NVD
NVD
added 2025/03/21 3:15 p.m.22 views

CVE-2025-29927

Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to ...

9.1CVSS0.92118EPSS
Exploits55References8
OSV
OSV
added 2025/03/21 2:34 p.m.10 views

CVE-2025-29927 Authorization Bypass in Next.js Middleware

Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to ...

9.1CVSS7.4AI score0.92118EPSS
Exploits55References10
CVE
CVE
added 2025/03/21 2:34 p.m.626 views

CVE-2025-29927

CVE‑2025‑29927 affects Next.js before patches: versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3. The issue is an authorization bypass that can occur if the check runs in middleware. Fixed in the specified versions; patching to a safe version is recommended. If patching is infeasible, block external r...

9.1CVSS6.9AI score0.92118EPSS
In wildExploits55References8Affected Software1
Openbugbounty
Openbugbounty
added 2025/03/21 4:55 a.m.8 views

camille-chaussy.com Cross Site Scripting vulnerability OBB-4038693

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/03/20 10:9 a.m.5 views

CVE-2024-9880

...

8.4AI score
Exploits0
SUSE Linux
SUSE Linux
added 2025/03/19 7:4 p.m.1 views

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002325 fixes several issues. The following security issues were fixed: CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fillframeinfo bsc1235452. CVE-2024-50302: HID: core: zero-initialize the report buffer bsc1233679. Patch Instructions:...

8.6CVSS8.4AI score0.02559EPSS
Exploits0References8
Rows per page
Query Builder