Lucene search
+L

14624 matches found

Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.7 views

PT-2025-37513

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the sock map free function within the kernel's bpf and sockmap implementation. Specifically, sock map free calls release socksk without holding a reference t...

6.2AI score0.00116EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.8 views

PT-2025-37593

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-syzkaller-12189-g19d17ab7c68b-dirty Description: The Linux kernel contained a data race condition related to kcm-rx psock. Specifically, kcm-rx psock could be read without a lock in the kcm rfree function...

5.9AI score0.00156EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/09/15 12:00 a.m.9 views

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices, Apple tvOS is a smart TV operating system, and Apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products that stems from a UDP server socket that may be incorrectly bound to all...

9.8CVSS6.1AI score0.00926EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.6 views

PT-2025-37502

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a vulnerability in the iwlwifi MVM subsystem that can lead to a double free on the transmit path. This issue can cause kernel crashes, lockups, and KASAN...

6.1AI score0.00161EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/09/11 7:38 a.m.10 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.9AI score0.00207EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/09/11 6:33 a.m.16 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.9AI score0.00207EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/09/10 8:45 p.m.6 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.9AI score0.00207EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/09/10 6:51 p.m.21 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.9AI score0.00207EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/09/10 6:25 p.m.10 views

kernel: udp: Fix memory accounting leak.

A memory overflow vulnerability exists within the Linux kernel's networking subsystem. Specifically, an application can set the SORCVBUF socket option to its maximum value INTMAX, which triggers an integer overflow within the udprmemrelease function during socket closure. The udpdestructcommon...

5.5CVSS6.9AI score0.00207EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-41396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module...

7.5CVSS7AI score0.01307EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-3922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to gain...

7.8CVSS7.5AI score0.00385EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2025/09/09 12:00 a.m.36 views

KLA87444 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

9.8CVSS9.3AI score0.20092EPSS
SaveExploits5References74
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.18 views

PT-2025-44148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel had a flaw in the Network Block Device NBD module where it permitted the use of various socket types, leading to potential abuse. Specifically, a testing tool named syzb...

4.6CVSS5.8AI score0.00193EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/07 8:01 a.m.15 views

net, hsr: reject HSR frame if skb can't hold tag

...

9.8CVSS6.8AI score0.00364EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/06 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-39695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP,...

5.5CVSS5.9AI score0.00154EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/09/05 11:23 p.m.7 views

SUSE CVE-2025-39695

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these rxe resources are...

5.5CVSS6.5AI score0.00154EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
added 2025/09/05 11:22 p.m.13 views

SUSE CVE-2025-39718

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skbput When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtiovsockskbrxput. Unfortunately, virtiovsockskbrxput uses the length...

5.5CVSS6.7AI score0.00157EPSS
SaveExploits0References25
Snyk
Snyk
added 2025/09/05 10:41 p.m.5 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/05 10:41 p.m.2 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release after establishing a TLS session. An attacker can cause excessive CPU utilization by initiating a half-shutdown of the connection during the handshake, leading the peer to enter a spin loop on socke...

8.7CVSS6.3AI score0.00427EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/05 6:15 p.m.20 views

AZL-66947 CVE-2025-39718 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skbput When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtiovsockskbrxput. Unfortunately, virtiovsockskbrxput uses the length...

8.4CVSS6.8AI score0.00157EPSS
SaveExploits0References1
Rows per page
Query Builder