Lucene search
+L

16620 matches found

Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•16 views

PT-2025-37850

Name of the Vulnerable Software and Affected Versions: macOS Tahoe version 26 macOS Sequoia versions 15.7 macOS Sonoma version 14.8 tvOS version 26 visionOS version 26 watchOS version 26 iOS versions prior to 18.7 iPadOS versions prior to 18.7 Description: A logic issue was addressed with improve...

10CVSS8.2AI score0.0096EPSS
SaveExploits0References22
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•17 views

Several Apple products have security vulnerabilities

Apple iOS is an operating system developed for mobile devices, Apple tvOS is a smart TV operating system, and Apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products that stems from a UDP server socket that may be incorrectly bound to all...

9.8CVSS8.1AI score0.0096EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•13 views

PT-2025-37513

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the sock map free function within the kernel's bpf and sockmap implementation. Specifically, sock map free calls release socksk without holding a reference t...

6.4AI score0.00118EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/09/15 12:00 a.m.•14 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the release of cloned SKBs not being handled correctly during the SKB merge process, which could lead to double...

4.7CVSS7AI score0.00267EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/09/11 7:38 a.m.•19 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/09/11 6:33 a.m.•22 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/09/10 8:45 p.m.•22 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/09/10 6:51 p.m.•28 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/09/10 6:25 p.m.•20 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2016-3922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to gain...

7.8CVSS7.5AI score0.00385EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2021-41396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module...

7.5CVSS7.3AI score0.01374EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•27 views

PT-2025-44148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel had a flaw in the Network Block Device NBD module where it permitted the use of various socket types, leading to potential abuse. Specifically, a testing tool named syzb...

7CVSS6.4AI score0.00206EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2025/09/09 12:00 a.m.•116 views

KLA87444 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

8.8CVSS8AI score0.25278EPSS
SaveExploits3References75
Microsoft CVE
Microsoft CVE
•added 2025/09/07 8:01 a.m.•23 views

net, hsr: reject HSR frame if skb can't hold tag

...

9.8CVSS7.4AI score0.00376EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/06 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-39695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP,...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/09/05 11:23 p.m.•11 views

SUSE CVE-2025-39695

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these rxe resources are...

5.5CVSS5.8AI score0.00157EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2025/09/05 11:22 p.m.•22 views

SUSE CVE-2025-39718

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skbput When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtiovsockskbrxput. Unfortunately, virtiovsockskbrxput uses the length...

5.5CVSS6.2AI score0.00161EPSS
SaveExploits0References25
Snyk
Snyk
•added 2025/09/05 10:41 p.m.•8 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS5.9AI score0.00448EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/05 10:41 p.m.•5 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS5.9AI score0.00448EPSS
SaveExploits0References2
Mend
Mend
•added 2025/09/05 9:59 p.m.•10 views

CVE-2025-58369

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net.tls package. When establishing a TLS...

6.9CVSS5.7AI score0.00448EPSS
SaveExploits0References11
Rows per page
Query Builder