Lucene search
+L

12715 matches found

SUSE CVE
SUSE CVE
•added 2025/04/18 1:29 a.m.•13 views

SUSE CVE-2025-3548

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

5.3CVSS5.4AI score0.00282EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•21 views

Tenda AC15 security vulnerabilities

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 15.03.05.19 and earlier versions suffer from a buffer overflow vulnerability, which originates from the mac parameter of the function fromSetWirelessRepeat in the file /goform/WifiExtraSet failing to correctly validate...

9CVSS8.7AI score0.01133EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/04/18 12:00 a.m.•23 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the skbsetlength function in the Linux operating system’s kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00259EPSS
SaveExploits0References20Affected Software10
BDU FSTEC
BDU FSTEC
•added 2025/04/18 12:00 a.m.•18 views

Linux kernel cache_setFlush DoS

The vulnerability of the cachesetFlush function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.8AI score0.00261EPSS
SaveExploits0References16Affected Software5
osv_debian
osv_debian
•added 2025/04/17 6:15 p.m.•79 views

DEBIAN-CVE-2021-47671

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: es58xrxerrmsg: fix memory leak in error path In es58xrxerrmsg, if can-dosetmode fails, the function directly returns without calling netifrxskb. This means that the skb previously allocated by alloccanerrskb is no...

3.3CVSS5.6AI score0.00182EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/04/17 6:15 p.m.•15 views

UBUNTU-CVE-2021-47671

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: es58xrxerrmsg: fix memory leak in error path In es58xrxerrmsg, if can-dosetmode fails, the function directly returns without calling netifrxskb. This means that the skb previously allocated by alloccanerrskb is no...

5.1CVSS5.6AI score0.00182EPSS
SaveExploits0References6
Mend
Mend
•added 2025/04/17 12:00 a.m.•13 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

7.5CVSS5.8AI score0.00402EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/04/17 12:00 a.m.•21 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

3.3CVSS5.8AI score0.00402EPSS
SaveExploits1References5
osv_azl
osv_azl
•added 2025/04/16 3:16 p.m.•39 views

AZL-69593 CVE-2025-22105 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning1: ip netns add ns1 ip netns exec ns1 ip link add bond0 type bond mode balance-rr ip netns exec ns1 ip link set dev bond0 xdp obj afxdpkern.o se...

5.5CVSS6AI score0.00204EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/04/16 3:16 p.m.•20 views

DEBIAN-CVE-2025-22095

In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulatorbulkget If the regulatorbulkget returns an error and no regulators are created, we need to set their number to zero. If we don't do this and the PCIe link up fails, a call to...

5.5CVSS6.2AI score0.0021EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/04/16 3:16 p.m.•20 views

UBUNTU-CVE-2025-22098

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix a deadlock in zynqmpdpignorehpdset Instead of attempting the same mutex twice, lock and unlock it. This bug has been detected by the Clang thread-safety analyzer...

5.5CVSS6AI score0.00151EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2025/04/16 3:16 p.m.•22 views

UBUNTU-CVE-2025-23133

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the following steps: 1. update new channel list to cfg80211 and queue regwork. ...

8.8CVSS7AI score0.00307EPSS
SaveExploits0References18
osv_ubuntu
osv_ubuntu
•added 2025/04/16 3:16 p.m.•21 views

UBUNTU-CVE-2025-22083

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is called multiple times without a vhostscsiclearendpoint between them, we can hit multiple bugs found by Haoran Zhang: 1. Use-after-free...

7.8CVSS6.4AI score0.00209EPSS
SaveExploits0References25
osv_cve
osv_cve
•added 2025/04/16 2:15 p.m.•19 views

CVE-2025-3693

A vulnerability was found in Tenda W12 3.0.0.5. It has been rated as critical. Affected by this issue is the function cgiWifiRadioSet of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public an...

9.8CVSS8.5AI score0.07394EPSS
SaveExploits1References5
SUSE Linux
SUSE Linux
•added 2025/04/16 7:51 a.m.•29 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-46925: Fixed kernel panic caused by race of smcsock bsc1220466. CVE-2021-47645: media: staging: media: zoran: calculate the right buffer number for...

8.5CVSS6.3AI score0.93838EPSS
SaveExploits14References942
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

TOTOLINK A3700R security vulnerabilities

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. The TOTOLINK A3700R suffers from an improper access control vulnerability that stems from the setWiFiEasyCfg/setWiFiEasyGuestCfg functions in the /cgi-bin/cstecgi.cgi file failing to properly handle specific...

8.2CVSS5.9AI score0.11316EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•12 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a risk of post-release reuse in multiple calls to setendpoint by vhost-scsi...

7.8CVSS6.5AI score0.00209EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a deadlock risk in zynqmpdpignorehpdset...

5.5CVSS5.9AI score0.00151EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•20 views

TOTOLINK A3700R security vulnerabilities

The TOTOLINK A3700R is a wireless router that provides network connectivity for homes and small offices. The TOTOLINK A3700R suffers from an Access Control Error vulnerability that originates from improper access control of the setDdnsCfg function in the /cgi-bin/cstecgi.cgi file. No detailed...

6.9CVSS5.8AI score0.00637EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

TOTOLINK A3700R security vulnerabilities

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity and management. The TOTOLINK A3700R suffers from an improper access control vulnerability that originates from improper access control of the setUPnPCfg function in the file /cgi-bin/cstecgi.cgi. No detailed...

6.9CVSS5.8AI score0.00637EPSS
SaveExploits1References5
Rows per page
Query Builder