Lucene search
+L

3896 matches found

NVD
NVD
•added 2025/11/10 10:15 p.m.•16 views

CVE-2025-64507

Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the security.shifted property set to true...

8.6CVSS0.00178EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2025/11/10 10:15 p.m.•27 views

UBUNTU-CVE-2025-64507

Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the security.shifted property set to true...

8.6CVSS7.7AI score0.00178EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/10 9:56 p.m.•70 views

CVE-2025-64507

CVE-2025-64507 affects Incus/LXD: in versions prior to 6.0.6 and 6.19.0 an unprivileged user who can access a container and a host with a custom storage volume that has security.shifted=true may create a setuid binary inside the container and execute it on the host to gain root. The issue require...

8.6CVSS7.7AI score0.00178EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
•added 2025/11/10 9:56 p.m.•19 views

CVE-2025-64507

Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the security.shifted property set to true...

8.6CVSS7.7AI score0.00178EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•4 views

CVE-2025-64507: Improper Privilege Management

Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the security.shifted property set to true...

8.6CVSS7.8AI score0.00178EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•17 views

PT-2025-46210

Name of the Vulnerable Software and Affected Versions Incus versions prior to 6.0.6 and 6.19.0 LXD versions prior to 5.0.2-5+deb12u2 Incus versions prior to 6.0.4-2+deb13u2 Description Incus, a system container and virtual machine manager, has a flaw that could allow local privilege escalation...

8.6CVSS7.8AI score0.00178EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•13 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990131 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via...

8.4CVSS6.3AI score0.00242EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•13 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990367 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via...

8.4CVSS6.3AI score0.00242EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/01 12:00 a.m.•18 views

PT-2025-44722

Name of the Vulnerable Software and Affected Versions OpenSMTPD affected versions not specified Description The software is susceptible to a denial-of-service condition through the use of a UNIX domain socket. The issue involves a potential for disruption of service. Recommendations At the moment...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits1References20
GithubExploit
GithubExploit
•added 2025/10/28 9:51 p.m.•212 views

Exploit for Uncontrolled Search Path Element in Needrestart_Project Needrestart

CVE-2024-4...

7.8CVSS8.2AI score0.21269EPSS
SaveExploits16
osv_cve
osv_cve
•added 2025/10/28 7:15 p.m.•22 views

CVE-2025-12424

Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS5.8AI score0.00342EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/28 3:30 p.m.•22 views

EUVD-2025-36506

The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authenticated user with high privileges to inject commands into the command shell of the TropOS 4th Gen device. The injected commands can be exploited to execute sever...

7.5CVSS6.9AI score0.00319EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/28 12:17 p.m.•31 views

CVE-2025-1038

The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authenticated user with high privileges to inject commands into the command shell of the TropOS 4th Gen device. The injected commands can be exploited to execute sever...

7.5CVSS0.00319EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/10/09 12:00 a.m.•37 views

VulnCheck KEV: CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.7AI score0.0048EPSS
SaveIn wildExploits18References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2001-0888

Malware in sbrugna...

6.2CVSS6.4AI score0.00322EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-4647

Malware in sbrugna...

7.8CVSS7.3AI score0.0045EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2003-0664

Malware in sbrugna...

2.1CVSS6.4AI score0.00409EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2002-2374

Malware in sbrugna...

7.2CVSS6.4AI score0.00418EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2005-0581

Malware in sbrugna...

2.1CVSS6.3AI score0.00318EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-2651

Malware in sbrugna...

4.6CVSS5.8AI score0.00547EPSS
SaveExploits0References9
Rows per page
Query Builder