Lucene search
+L

14874 matches found

Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.5 views

PT-2023-34076 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the association of a socket buffer skb with a device at transmission time. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.6 views

PT-2023-33639 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the handling of network packets, specifically the association of a socket buffer skb with a device during transmission. The actual impact and potential for attack hav...

7.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.11 views

PT-2023-33326 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 5.10.157 Description: A potential socket leak was identified in the p9 socket open function of the net/9p protocol. The issue was introduced in version v2.6.33 and fixed in version v5.10.158. The actual...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.5 views

PT-2023-33226 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a problem in the xen/netback component where kfree skb is called with interrupts disabled. The actual impact and attack plausibility have not yet been proven...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.7 views

PT-2023-33345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: A potential issue exists in the greth init rings function, which may lead to a skb leak. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.6 views

PT-2023-33255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A potential socket leak was identified in the p9 socket open function of the net/9p protocol. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.4 views

PT-2023-33447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.301 Description: A potential socket leak was discovered in the p9 socket open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.4 views

PT-2023-33382 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 5.4.225 Description: A potential socket leak was identified in the p9 socket open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.6 views

PT-2023-34403 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the handling of network packets, specifically the association of a socket buffer skb with a device during transmission tx. The actual impact and potential for attac...

7.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.7 views

PT-2023-33165 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.33 through 6.0.11 Description: A potential socket leak was identified in the p9 socket open function of the net/9p module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

7.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:00 a.m.15 views

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Microsoft Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted...

8.1CVSS8AI score0.01084EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:00 a.m.11 views

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Microsoft Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created SSTP...

8.1CVSS8AI score0.01084EPSS
SaveExploits0References2
OSV
OSV
added 2023/01/12 7:15 p.m.11 views

DEBIAN-CVE-2022-3977

A use-after-free flaw was found in the Linux kernel MCTP Management Component Transport Protocol functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on...

7.8CVSS6.3AI score0.0025EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/12 7:15 p.m.27 views

Design/Logic Flaw

A use-after-free flaw was found in the Linux kernel MCTP Management Component Transport Protocol functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on...

4.3CVSS7.2AI score0.0025EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/11 12:00 a.m.57 views

Ubuntu 22.10 : Linux kernel (IBM) vulnerabilities (USN-5793-4)

The remote Ubuntu 22.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5793-4 advisory. It was discovered that the iouring subsystem in the Linux kernel did not properly perform reference counting in some situations, leading to a use- after-free...

7.8CVSS7.3AI score0.03194EPSS
SaveExploits5References18
OpenVAS
OpenVAS
added 2023/01/11 12:00 a.m.33 views

Microsoft Windows Multiple Vulnerabilities (KB5022286)

This host is missing an important security update according to Microsoft KB5022286 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.1CVSS7.5AI score0.92529EPSS
SaveExploits3References3
ATTACKERKB
ATTACKERKB
added 2023/01/10 10:15 p.m.11 views

CVE-2023-21548

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

8.1CVSS7.3AI score0.01084EPSS
SaveExploits0References3Affected Software25
NVD
NVD
added 2023/01/10 10:15 p.m.24 views

CVE-2023-21548

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

8.1CVSS8.5AI score0.01084EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/01/10 10:15 p.m.6 views

CVE-2023-21535

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

8.1CVSS7.3AI score0.01084EPSS
SaveExploits0References3Affected Software21
OSV
OSV
added 2023/01/10 10:15 p.m.3 views

CVE-2023-21535

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

8.1CVSS7.4AI score0.01084EPSS
SaveExploits0References1
Rows per page
Query Builder