Lucene search
K

42 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: powerpc64/ftrace: fixed the issue where r15 was clobbered during livepatching. While r15 is always clobbered with PPCFTRACEOUTOFLINE, it is not restored during the livepatch sequence, resulting in less obvious failures, as sho...

7.8CVSS5.8AI score0.00078EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/03 12:26 a.m.1 views

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

9.8CVSS7.7AI score0.00153EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/02 6:30 p.m.1 views

EUVD-2025-200290

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

7.2AI score0.00153EPSS
Exploits0References2
NVD
NVD
added 2025/12/02 6:15 p.m.1 views

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

9.8CVSS0.00153EPSS
Exploits0References1
OSV
OSV
added 2025/12/02 6:15 p.m.1 views

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

9.8CVSS5.7AI score0.00153EPSS
Exploits0References1
CVE
CVE
added 2025/12/02 12:0 a.m.5 views

CVE-2025-60854

CVE-2025-60854 affects D-Link R15 (AX1500) prior to 1.20.02. The vulnerability allows command injection in httpd by manipulating the model name parameter during a password change on the web administrator page. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, no user interact...

9.8CVSS7.3AI score0.00153EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/02 12:0 a.m.3 views

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

0.00153EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.1 views

PT-2025-48741

Name of the Vulnerable Software and Affected Versions D-Link R15 AX1500 versions prior to 1.20.02 Description A flaw exists in D-Link R15 AX1500 that allows for command injection. The issue occurs due to manipulation of the model name parameter during a password change request on the web...

9.8CVSS7AI score0.00153EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.1 views

D-Link R15 安全漏洞

D-Link R15 is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link R15 that originates from the incorrect operation of the model name parameter during a password change request in the web administrator page, which could lead to command injection...

9.8CVSS7AI score0.00153EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-20023

Malicious code in bioql PyPI...

6.4AI score0.00078EPSS
Exploits0References2
NVD
NVD
added 2025/07/04 2:15 p.m.3 views

CVE-2025-38233

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

7.8CVSS0.00078EPSS
Exploits0References2
OSV
OSV
added 2025/07/04 2:15 p.m.0 views

UBUNTU-CVE-2025-38233

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

7.8CVSS5.7AI score0.00078EPSS
Exploits0References11
CVE
CVE
added 2025/07/04 1:37 p.m.29 views

CVE-2025-38233

The CVE 2025-38233 entry describes a Linux kernel PPC64 ftrace livepatching issue where r15 is clobbered and not restored in the livepatch sequence, causing kernel faults (example trace shows an oops and bad memory access). Connected docs confirm concrete fixes: restore r15 unconditionally in the...

7.8CVSS6.4AI score0.00078EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/07/04 1:37 p.m.0 views

CVE-2025-38233 powerpc64/ftrace: fix clobbered r15 during livepatching

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

7.8CVSS6.4AI score0.00078EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/07/04 1:37 p.m.5 views

CVE-2025-38233 powerpc64/ftrace: fix clobbered r15 during livepatching

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

0.00078EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.0 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the r15 register not being restored during ftrace live patching on the powerpc64 architecture...

7.8CVSS8AI score0.00078EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:13 a.m.12 views

CVE-2023-41603

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6...

5.3CVSS7.3AI score0.00228EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.2 views

PT-2025-28008 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0 and later Description: The issue is related to the powerpc64/ftrace component of the Linux kernel, where the register r15 is clobbered during livepatching and not restored, leading to potential kernel crashes. Thi...

4.6CVSS6AI score0.00078EPSS
Exploits0References12
CNVD
CNVD
added 2024/01/16 12:0 a.m.35 views

D-Link R15 Code Issue Vulnerability

The D-Link R15 is a wireless router from China-based AUO D-Link. The D-Link R15 v1.08.02 suffers from a code issue vulnerability that stems from the device not including firewall restrictions for IPv6 traffic, which can be exploited by an attacker to arbitrarily access services on the device that...

5.3CVSS7AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2024/01/10 8:15 a.m.0 views

CVE-2023-41603

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6...

5.3CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder