Lucene search
+L

3399 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/06 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-40949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio When testing shmem...

7.8CVSS5.2AI score0.00221EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-23154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix ioreqpostcqe abuse by send bundle 114.987980 T5313 WARNING: CPU: 6 PID: 531...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2025-22057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: decrease cached dst counters in dstrelease Upstream fix ac888d58869b net: do not delay dstentriesadd in dstrelease moved decrementing the dst count from...

7.8CVSS6.6AI score0.00202EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-50035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpubolist mutex If amdgpucsvmhandling returns r != 0,...

7.8CVSS5.4AI score0.00157EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/02 10:25 p.m.70 views

CVE-2023-32255

CVE-2023-32255 affects the Linux kernel ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion. The provided connected documents (NVD, OSV entries, and vendor advisories) confirm this beha...

5.3CVSS6.1AI score0.00477EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/07/31 7:24 a.m.13 views

CVE-2025-41396

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user...

5.4CVSS0.00379EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/30 4:21 p.m.10 views

GHSA-652X-M2GR-HPPM OAuth2-Proxy's `--gitlab-group` GitLab Group Authorization config flag stopped working in v7.0.0

The --gitlab-group flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the flag settings, authorization wasn't restricted. Additionally, any authenticated users had whichever groups were set in --gitlab-group added to the new...

5.5CVSS6.7AI score0.00987EPSS
SaveExploits0References7
CVE
CVE
added 2025/07/30 3:15 p.m.66 views

CVE-2023-2593

CVE-2023-2593: Linux kernel vulnerability in TCP connection handling causes memory not released after its lifetime, enabling unauthenticated network-based denial-of-service. Severity listed as CVSS v3.1 Base Score 5.9 (Medium); attack vector: NETWORK, user interaction: NONE, privileges required: ...

5.9CVSS6.3AI score0.00732EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/29 12:00 a.m.8 views

PT-2025-31307 · Apple · Macos Ventura +4

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.9 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 macOS Ventura versions prior to 13.7.7 Description: A logging issue existed due to insufficient data redaction. This allowed an...

5.5CVSS5.8AI score0.0021EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/07/28 6:16 p.m.30 views

CVE-2025-8283 Netavark: podman: netavark may resolve hostnames to unexpected hosts

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...

3.7CVSS0.00293EPSS
SaveExploits0References5
CVE
CVE
added 2025/07/28 4:20 p.m.29 views

CVE-2025-54527

CVE-2025-54527 affects JetBrains YouTrack. The issue is an improper iframe configuration in the widget sandbox that allows popups to bypass security restrictions. Affects YouTrack versions prior to 2025.2.86935 and includes 2025.2.86935, 2025.2.87167, 2025.3.87341, and 2025.3.87344. The Red Hat/R...

6.1CVSS6.6AI score0.0026EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2025/07/28 11:21 a.m.16 views

CVE-2025-38472

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry from the hash bucket list: exception RIP: nfctdeletefromlists+172 .. 7...

9.8CVSS5.4AI score0.00393EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/07/28 12:00 a.m.6 views

FreeBSD : Mozilla -- cookie shadowing (5abc2187-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5abc2187-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Setting a nameless cookie with an equals sign in the value shadowed other...

9.1CVSS5.5AI score0.00217EPSS
SaveExploits0References3
CVE
CVE
added 2025/07/25 3:27 p.m.101 views

CVE-2025-38463

CVE-2025-38463: Linux kernel TCP skb remaining space calculation contains a signedness bug in skb->len vs size_goal, allowing sk_forward_alloc overflow in certain write-path conditions. Root cause: copy = size_goal - skb->len is computed with mismatched signed/unsigned types, producing a la...

7.8CVSS6.3AI score0.00158EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/07/25 12:47 p.m.19 views

CVE-2025-38369 dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent proce...

6.2AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/07/22 9:06 p.m.12 views

CVE-2025-7907

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src/main/resources/application-druid.yml of the component Druid. The manipulation leads to use of default credentials. It is possible to...

5.3CVSS7.2AI score0.00432EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/22 3:32 a.m.9 views

CVE-2025-7953 Sanluan PublicCMS viewer.html redirect

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some unknown processing of the file publiccms-parent/publiccms/src/main/webapp/resource/plugins/pdfjs/viewer.html. The manipulation of the argument File leads to open...

5.1CVSS5AI score
SaveExploits0References7
NVD
NVD
added 2025/07/18 6:15 p.m.7 views

CVE-2025-53901

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import functions can lead to a WebAssembly guest inducing a panic in the host embedder. The specific bug is triggered by calling pathopen after calling...

3.5CVSS0.00306EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/07/13 12:00 a.m.8 views

PT-2025-33570

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in cifs oplock break can lead to a use-after-free of the cinode structure during unmounting. This occurs when umount releases its reference to the superblock, triggeri...

7.8CVSS7AI score0.00405EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/07/11 12:00 a.m.7 views

CBL Mariner 2.0 Security Update: lua / memcached / ntopng (CVE-2021-44964)

The version of lua / memcached / ntopng installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44964 advisory. - Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3...

6.3CVSS6.8AI score0.00985EPSS
SaveExploits1References2
Rows per page
Query Builder