Lucene search
+L

1578 matches found

OSV
OSV
added 2025/03/21 10:15 p.m.7 views

AZL-59193 CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-2

golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits via a call to strings.Split its argument which is untrusted data on periods. As a result, in the face of a malicious request whose...

7.5CVSS6.7AI score0.00693EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/18 12:0 a.m.9 views

PT-2025-20345

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue is related to the use of the counted by function in the vsc-tp.c code, which is using the counted bylen attribute on vsc ...

5.5CVSS6.7AI score0.00179EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/03/14 7:0 a.m.5 views

tty: xilinx_uartps: split sysrq handling

...

5.5CVSS7.4AI score0.00162EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/03/14 7:0 a.m.6 views

block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()

...

7.8CVSS7.6AI score0.00206EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2024-53079

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/thp: fix deferred split unqueue naming and locking Recent changes are putting more pressure on THP deferred split queues: under load revealing long-standing...

7.8CVSS6.7AI score0.00178EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/27 8:16 p.m.3 views

DEBIAN-CVE-2025-21820

In the Linux kernel, the following vulnerability has been resolved: tty: xilinxuartps: split sysrq handling lockdep detects the following circular locking dependency: CPU 0 CPU 1 ========================== ============================ cdnsuartisr printk uartportlockport consolelock...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/02/27 3:8 a.m.4 views

SUSE CVE-2022-49334

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: Fix xarray node memory leak If xassplitalloc fails to allocate the necessary nodes to complete the xarray entry split, it sets the xastate to -ENOMEM, which xasnomem then interprets as "Please allocate more memory"...

5.5CVSS5.5AI score0.00253EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/02/27 3:7 a.m.4 views

SUSE CVE-2022-49378

In the Linux kernel, the following vulnerability has been resolved: sfc: fix considering that all channels have TX queues Normally, all channels have RX and TX queues, but this is not true if modparam efxseparatetxchannels=1 is used. In that cases, some channels only have RX queues and others onl...

5.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/02/27 3:3 a.m.7 views

SUSE CVE-2022-49642

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed 0. The problem occurs when the split header...

5.5CVSS6.5AI score0.00256EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the btrfssplitorderedextent function not properly handling the BTRFSORDEREDIOERR flag when handling a...

5.5CVSS6.5AI score0.0023EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/26 7:1 a.m.6 views

DEBIAN-CVE-2022-49642

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed 0. The problem occurs when the split header...

5.5CVSS5.8AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 7:1 a.m.8 views

UBUNTU-CVE-2022-49642

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed 0. The problem occurs when the split header...

5.5CVSS6.4AI score0.00256EPSS
SaveExploits0References8
OSV
OSV
added 2025/02/26 2:23 a.m.21 views

CVE-2022-49642 net: stmmac: dwc-qos: Disable split header for Tegra194

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed 0. The problem occurs when the split header...

5.3AI score
SaveExploits0References8
CVE
CVE
added 2025/02/26 2:23 a.m.168 views

CVE-2022-49642

CVE-2022-49642 concerns the Linux kernel: the Synopsys DWC Ethernet driver (net: stmmac: dwc-qos) on Tegra194 can crash the system when the split header feature is enabled, due to an unexpected buffer length that can overflow the total buffer length calculation. NVIDIA feedback indicates split he...

5.5CVSS5.6AI score0.00256EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2025/02/26 2:23 a.m.11 views

CVE-2022-49642

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed 0. The problem occurs when the split header...

5.5CVSS5.8AI score0.00256EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a system crash caused by the split header function in the stmmac driver for the Tegra 194...

5.5CVSS5.4AI score0.00256EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/20 8:15 a.m.7 views

CVE-2024-13155

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

5.4CVSS6AI score0.00339EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/20 7:33 a.m.12 views

CVE-2024-13155 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00339EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/20 7:33 a.m.65 views

CVE-2024-13155

CVE-2024-13155 affects Unlimited Elements For Elementor (WordPress) up to version 1.5.140, with a Stored XSS via the Transparent Split Hero widget. Exploitation requires authenticated access (contributor+); an attacker can inject scripts that run when users load injected pages. Patch guidance fro...

6.4CVSS6AI score0.00339EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2025/02/19 10:51 p.m.8 views

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Transparent Split Hero Widget vulnerability discovered by zer0gh0st in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.140...

6.4CVSS5.8AI score0.00339EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder