Lucene search
+L

2412 matches found

Qualys Blog
Qualys Blog
added 2025/04/15 3:00 p.m.14 views

The Efficiency Imperative: How Federal Agencies Can Streamline Cybersecurity Operations

With increasing scrutiny on government spending, federal agencies face mounting pressure to optimize IT budgets while fortifying cybersecurity defenses. However, the unchecked proliferation of security tools has led to inefficiencies, reduced visibility, and increasing total cost of ownership. A...

7.7AI score
SaveExploits0
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.10 views

pleezer 安全漏洞

pleezer is a Deezer Connect player by the individual developer Roderick van Domburg. A security vulnerability exists in versions of pleezer prior to 0.16.0, which stems from a hook script that does not properly clean up processes, potentially leading to the accumulation of zombie processes...

6.5CVSS6.4AI score0.00368EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/14 5:49 p.m.13 views

GHSA-472W-7W45-G3W5 Pleezer resource exhaustion through uncollected hook script processes

Impact Hook scripts in pleezer can be triggered by various events like track changes and playback state changes. In affected versions, these scripts were spawned without proper process cleanup, leaving zombie processes in the system's process table. Even during normal usage, every track change an...

6.5CVSS7AI score0.00368EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/04/14 5:49 p.m.25 views

Pleezer resource exhaustion through uncollected hook script processes

Impact Hook scripts in pleezer can be triggered by various events like track changes and playback state changes. In affected versions, these scripts were spawned without proper process cleanup, leaving zombie processes in the system's process table. Even during normal usage, every track change an...

6.5CVSS7AI score0.00368EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/14 12:00 a.m.13 views

PT-2025-16387 · Pleezer · Pleezer

Name of the Vulnerable Software and Affected Versions: pleezer versions prior to 0.16.0 Description: The issue arises from hook scripts in pleezer being spawned without proper process cleanup, leading to zombie processes in the system's process table. This occurs with every track change and...

6.5CVSS6.2AI score0.00368EPSS
SaveExploits0References10
Mageia
Mageia
added 2025/04/10 12:22 a.m.37 views

Updated atop packages fix security vulnerability

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop. CVE-2025-31160...

2.9CVSS7.8AI score0.002EPSS
SaveExploits0References9
OSV
OSV
added 2025/04/10 12:22 a.m.12 views

MGASA-2025-0129 Updated atop packages fix security vulnerability

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop. CVE-2025-31160...

2.9CVSS7.2AI score0.002EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2025/04/08 5:23 p.m.23 views

CVE-2025-29792 Microsoft Office Elevation of Privilege Vulnerability

...

7.3CVSS0.01089EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/07 11:15 a.m.15 views

CVE-2024-45557

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...

7.8CVSS0.00103EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2025/04/01 1:15 p.m.14 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

7.4CVSS6.2AI score0.00371EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/04/01 1:43 a.m.8 views

SUSE CVE-2025-31160

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

2.9CVSS7.1AI score0.002EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2025/04/01 12:00 a.m.13 views

Mozilla -- privilege escalation attack

[email protected] reports: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks...

7.4CVSS7.7AI score0.00371EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.7 views

PT-2025-14107

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue involves the leaking of file descriptors from the fork server to web content processes, which could allow for privilege escalation attacks. Recommendations F...

9.8CVSS7.6AI score0.00568EPSS
SaveExploits0References373
RedhatCVE
RedhatCVE
added 2025/03/27 5:38 a.m.9 views

CVE-2025-31160

A flaw was found in Atop, through 2.11.0. This issue may allow local users to cause a denial of service, such as an assertion failure and application exit, or other unspecified impact by running certain types of unprivileged processes while a different user runs atop. Mitigation Mitigation for th...

2.9CVSS3.8AI score0.002EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.17 views

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 136.0.4 and...

10CVSS8.6AI score0.09157EPSS
SaveExploits7References6
OSV
OSV
added 2025/03/26 9:15 p.m.4 views

ALPINE-CVE-2025-31160

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

2.9CVSS7.1AI score0.002EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/26 9:15 p.m.23 views

CVE-2025-31160

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

2.9CVSS0.002EPSS
SaveExploits0References11
OSV
OSV
added 2025/03/26 9:15 p.m.3 views

DEBIAN-CVE-2025-31160

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

2.9CVSS4.8AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/26 9:15 p.m.17 views

AZL-59270 CVE-2025-31160 affecting package atop for versions less than 2.6.0-10

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

2.9CVSS5.8AI score0.002EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/26 9:15 p.m.14 views

AZL-59278 CVE-2025-31160 affecting package atop for versions less than 2.9.0-2

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

2.9CVSS5.8AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder