Lucene search
K

4114 matches found

Positive Technologies
Positive Technologies
added 2025/06/25 12:0 a.m.4 views

PT-2025-26816 · Brother Industries +4 · Ads-1250W +651

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker who can connect to the Web Services feature HTTP TCP port 80 can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target...

7.5CVSS6.3AI score0.02059EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2025/06/25 12:0 a.m.6 views

Oracle Linux 9 : libblockdev (ELSA-2025-9327)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9327 advisory. 2.28-14.0.1 - enable btrfs support Orabug: 30792917 2.28-14 - Don't allow suid and dev set on fs resize CVE-2025-6019 Resolves: RHEL-96038 Tenable has extracted...

7CVSS7.8AI score0.00031EPSS
Exploits18References2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the cfg80211gen_new_ie() function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cfg80211gennewie function in the net/wireless/scan.c module, which supports wireless communication in Linux kernels, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow a...

7.8CVSS6.8AI score0.00016EPSS
Exploits0References15Affected Software2
RedhatCVE
RedhatCVE
added 2025/06/23 8:38 a.m.4 views

CVE-2025-49156

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7CVSS7.5AI score0.00082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/21 1:48 p.m.3 views

CVE-2025-38013

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

5.5CVSS7.2AI score0.00067EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/06/19 3:46 a.m.2 views

SUSE CVE-2022-49934

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211scanrx ieee80211scanrx tries to access scanreq-flags after a null check, but a UAF is observed when the scan is completed and ieee80211scancompleted executes, which then calls cfg80211scandone...

4.7CVSS6.3AI score0.00064EPSS
Exploits0References12
SUSE CVE
SUSE CVE
added 2025/06/19 3:16 a.m.2 views

SUSE CVE-2025-38013

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

6.6CVSS7.9AI score0.00067EPSS
Exploits0References18
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.2 views

The vulnerability of the mac802154_scan_worker() function in the /net/mac802154/scan.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mac802154scanworker function in the /net/mac802154/scan.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS7.2AI score0.00031EPSS
Exploits0References16Affected Software4
OSV
OSV
added 2025/06/18 11:15 a.m.1 views

DEBIAN-CVE-2022-49942

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

5.5CVSS5.3AI score0.00063EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.2 views

DEBIAN-CVE-2022-49934

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211scanrx ieee80211scanrx tries to access scanreq-flags after a null check, but a UAF is observed when the scan is completed and ieee80211scancompleted executes, which then calls cfg80211scandone...

7.8CVSS5.4AI score0.00064EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.0 views

UBUNTU-CVE-2022-49934

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211scanrx ieee80211scanrx tries to access scanreq-flags after a null check, but a UAF is observed when the scan is completed and ieee80211scancompleted executes, which then calls cfg80211scandone...

7.8CVSS6.1AI score0.00064EPSS
Exploits0References11
CVE
CVE
added 2025/06/18 10:54 a.m.77 views

CVE-2022-49934

The CVE-2022-49934 vulnerability affects the Linux kernel’s wifi stack (mac80211) where UAF can occur in ieee80211_scan_rx() after the null check due to race with __ieee80211_scan_completed() and cfg80211_scan_done() freeing scan_req. The issue is mitigated by a fix in the kernel that prevents ac...

7.8CVSS6.4AI score0.00064EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2025/06/18 10:54 a.m.12 views

CVE-2022-49934

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211scanrx ieee80211scanrx tries to access scanreq-flags after a null check, but a UAF is observed when the scan is completed and ieee80211scancompleted executes, which then calls cfg80211scandone...

7.8CVSS5.4AI score0.00064EPSS
Exploits0
OSV
OSV
added 2025/06/18 10:15 a.m.0 views

DEBIAN-CVE-2025-38013

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

7.8CVSS5.9AI score0.00067EPSS
Exploits0References1
OSV
OSV
added 2025/06/18 10:15 a.m.0 views

UBUNTU-CVE-2025-38013

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set nchannels after allocating struct cfg80211scanrequest Make sure that nchannels is set after allocating the struct cfg80211registereddevice::intscanreq member. Seen with syzkaller: UBSAN:...

7.8CVSS6.3AI score0.00067EPSS
Exploits0References26
OSV
OSV
added 2025/06/17 7:15 p.m.3 views

CVE-2025-49156

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

7.8CVSS6AI score0.00082EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/06/15 12:42 p.m.234 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

VIETNAMESE - Cách sử dụng - Quét một IP: python3...

10CVSS8.3AI score0.59319EPSS
Exploits35
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.3 views

GeoServer 代码问题漏洞

GeoServer is GeoServer open source an open source software server written in Java. It allows users to share and edit geospatial data. A code issue vulnerability exists in GeoServer that stems from improper URI validation, which could allow an unauthorized attacker to perform an XML external entit...

9.3CVSS6.7AI score0.00423EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/06/08 1:18 p.m.3 views

CVE-2025-26590

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nir Complete Google Seo Scan complete-google-seo-scan allows SQL Injection.This issue affects Complete Google Seo Scan: from n/a through = 3.5.1...

7.6CVSS5.9AI score0.00213EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.2 views

CVE-2025-26590

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nir Complete Google Seo Scan complete-google-seo-scan allows SQL Injection.This issue affects Complete Google Seo Scan: from n/a through = 3.5.1...

7.6CVSS0.00213EPSS
Exploits0References1
Rows per page
Query Builder