Lucene search
+L

12013 matches found

osv_ghsa
osv_ghsa
•added 2025/02/14 5:58 p.m.•24 views

GHSA-XX4V-PRFH-6CGC @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Summary A Regular Expression Denial of Service ReDoS vulnerability exists in the processing of HTTP request headers. By sending an authorization header containing an excessively long sequence of spaces followed by a newline and "@", an attacker can exploit inefficient regular expression processin...

5.3CVSS5.5AI score0.00628EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2025/02/14 10:19 a.m.•12 views

SUSE-SU-2025:0548-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. bsc1236878...

5.3CVSS7.1AI score0.0111EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2025/02/14 7:24 a.m.•13 views

SUSE-SU-2025:0546-1 Security update golang-github-prometheus-prometheus

golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 - Highlights of other changes: Performance: + Significant enhancements to PromQL execution...

3.1CVSS7.1AI score0.00541EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2025/02/14 7:18 a.m.•22 views

SUSE-SU-2025:0525-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: dracut-saltboot was updated to version 0.1.1728559936.c16d4fb: - Added MAC based terminal naming option jscSUMA-314 golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated...

9.8CVSS8AI score0.03995EPSS
SaveExploits3References28
SUSE Linux
SUSE Linux
•added 2025/02/14 7:16 a.m.•40 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 Highlights of other changes: Performance: Significant...

9.4CVSS8.1AI score0.03995EPSS
SaveExploits3References60
osv_suse
osv_suse
•added 2025/02/14 7:16 a.m.•29 views

SUSE-SU-2025:0524-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 - Highlights of other changes: Performance: +...

9.8CVSS8AI score0.03995EPSS
SaveExploits3References28
Pen Test Partners Blog
Pen Test Partners Blog
•added 2025/02/14 6:18 a.m.•27 views

New mandatory USCG cyber regulations. What you need to know

TL;DR US Coast Guard introduces mandatory new Marine Transportation System cybersecurity requirements They take effect on July 16, 2025, and training must begin by July 17, 2025 US flagged large commercial vessels affected Cybersecurity Officers CySO need to be appointed Penetration testing of...

7.6AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/02/14 4:31 a.m.•11 views

SUSE CVE-2024-45769

A vulnerability was found in Performance Co-Pilot PCP. This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash...

5.5CVSS6.8AI score0.00259EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2025/02/14 12:00 a.m.•4 views

Microsoft high-performance computing (HPC) Pack Installed (Windows)

Binary data microsofthpcwininstalled.nbin...

7.3AI score
SaveExploits0References1
osv_rlsa
osv_rlsa
•added 2025/02/13 8:34 p.m.•23 views

RLSA-2025:1215 Moderate: tbb security update

Threading Building Blocks TBB is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the securit...

6.9CVSS6.8AI score0.84887EPSS
SaveExploits7References2
osv_suse
osv_suse
•added 2025/02/13 11:47 a.m.•12 views

SUSE-SU-2025:0512-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. bsc1236878...

5.3CVSS7.1AI score0.0111EPSS
SaveExploits0References3
Fedora
Fedora
•added 2025/02/13 2:02 a.m.•21 views

[SECURITY] Fedora 40 Update: rust-pore-0.1.17-5.fc40

A performance oriented reimplementation of repo...

7.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/02/11 6:15 p.m.•10 views

CVE-2025-21198

Microsoft High Performance Compute HPC Pack Remote Code Execution Vulnerability...

9CVSS7.4AI score0.00939EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/11 5:58 p.m.•55 views

CVE-2025-21179 DHCP Client Service Denial of Service Vulnerability

...

4.8CVSS0.00747EPSS
SaveExploits0References1
Akamai Blog
Akamai Blog
•added 2025/02/11 1:00 p.m.•20 views

Exploring a VPN Appliance: A Researcher?s Journey

...

7.3AI score
SaveExploits0
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•16 views

Astra Linux – Vulnerability in bind9

Resolver caches and authoritative zone databases that hold a significant number of Resource Records for the same hostname of any RTYPE may experience degraded performance as content is added or updated, as well as when handling client queries for this name. This issue affects BIND 9 versions 9.11...

7.5CVSS7.5AI score0.02114EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•23 views

PT-2025-6682 · Intel · Intel Gpa +1

Name of the Vulnerable Software and Affected Versions: IntelR GPA and IntelR GPA Framework affected versions not specified Description: The issue concerns incorrect default permissions for some software installers, potentially allowing an authenticated user to enable escalation of privilege via...

6.7CVSS7.1AI score0.00162EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•15 views

Microsoft High Performance Compute Pack 安全漏洞

Microsoft High Performance Compute Pack HPC is a high-performance computing HPC solution from Microsoft Corporation USA that is primarily used to create and manage high-performance computing clusters. A security vulnerability exists in Microsoft High Performance Compute Pack HPC. An attacker...

9CVSS8.9AI score0.00939EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•3 views

PT-2025-6295

Name of the Vulnerable Software and Affected Versions: Microsoft High Performance Compute HPC Pack affected versions not specified Description: The issue concerns a remote code execution problem. There is no information provided about the estimated number of potentially affected devices worldwide...

9CVSS0.00939EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•6 views

CVE-2025-21198: Missing Authentication for Critical Function

Microsoft High Performance Compute HPC Pack Remote Code Execution Vulnerability...

9CVSS8.2AI score0.00939EPSS
SaveExploits0References1
Rows per page
Query Builder