Lucene search
K

26 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba This vulnerability was discovered by Atuin – the Automated Vulnerability Discovery Engine. newpba is a value derived from the status packet returned after each write operation. A...

5.8AI score0.00076EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.2 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012979 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability...

5.9AI score0.00076EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2025/12/12 6:15 p.m.3 views

CVE-2025-40345

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

5.9AI score0.00076EPSS
Exploits0References35
OSV
OSV
added 2025/12/12 6:15 p.m.1 views

UBUNTU-CVE-2025-40345

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

5.7AI score0.00076EPSS
Exploits0References36
OSV
OSV
added 2025/12/12 5:53 p.m.1 views

CVE-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

6.3AI score0.00076EPSS
Exploits0References10
CVE
CVE
added 2025/12/12 5:53 p.m.8 views

CVE-2025-40345

CVE-2025-40345 affects Linux kernel USB storage for the sddr55, where new_pba values from the status packet could exceed the computed block count, causing the driver to walk past pba_to_lba[] and corrupt heap memory. The fix rejects PBAs that exceed the block count and fails the transfer to avoid...

6.1AI score0.00076EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/12/12 5:53 p.m.28 views

CVE-2025-40345 usb: storage: sddr55: Reject out-of-bound new_pba

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

0.00076EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the sddr55 driver rejecting an out-of-range newpba, which could lead to heap memory corruption...

6.1AI score0.00076EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-40345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned...

6.1AI score0.00076EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm)

The package updated-tricks-robux-generator-free2023-ss1nujjg-pba was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-37905 Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm)

The package updated-tricks-robux-generator-free2023-ss1nujjg-pba was found to contain malicious code...

7.2AI score
Exploits0
NVD
NVD
added 2024/08/08 6:15 p.m.9 views

CVE-2023-24063

Diebold Nixdorf Vynamic Security Suite VSS before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization PBA process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk...

6.8CVSS0.00304EPSS
Exploits1References2
Openbugbounty
Openbugbounty
added 2023/10/13 1:3 p.m.13 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3747069

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/10/10 6:0 a.m.12 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3738083

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/10/07 6:42 p.m.9 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3728872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/09/30 6:17 p.m.13 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3714384

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/07/17 9:40 a.m.18 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3523863

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/07/12 3:6 p.m.13 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3508529

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/06/23 12:1 p.m.13 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3459723

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/06/21 9:30 p.m.9 views

pba-auctions.com Cross Site Scripting vulnerability OBB-3455415

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Rows per page
Query Builder