Lucene search
+L

25408 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2024-36010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: igb: Fix string truncation warnings in igbsetfwversion Commit 1978d3ead82c intel: fix string...

5.5CVSS6.2AI score0.00178EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2023-52464

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of- bounds string access Enabling -Wstringop-overflow...

7.8CVSS6.3AI score0.00266EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2021-3712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffe...

7.4CVSS6.7AI score0.50445EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/03/04 2:39 p.m.•21 views

json-lib: Mishandling of an unbalanced comment string in json-lib

A flaw was found in JSON-lib's JSONTokener component. This vulnerability allows a denial of service via an unbalanced comment string...

5.3CVSS5.7AI score0.17565EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2025/03/04 2:20 p.m.•35 views

json-lib: Mishandling of an unbalanced comment string in json-lib

A flaw was found in JSON-lib's JSONTokener component. This vulnerability allows a denial of service via an unbalanced comment string...

5.3CVSS5.7AI score0.17565EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2025/03/04 2:15 p.m.•17 views

CVE-2025-1942

When String.toUpperCase caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox 136 and Thunderbird 136...

9.8CVSS6.8AI score0.00479EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2025/03/04 2:15 p.m.•15 views

UBUNTU-CVE-2025-1942

When String.toUpperCase caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136...

9.8CVSS6.9AI score0.00479EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2012-5580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service...

7.5CVSS6.6AI score0.03129EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2012-0864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the...

6.8CVSS8.3AI score0.02717EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2020-11078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additiona...

6.8CVSS6.6AI score0.02427EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/03/03 8:53 p.m.•40 views

CGI has Denial of Service (DoS) potential in Cookie.parse

There is a possibility for DoS by in the cgi gem. This vulnerability has been assigned the CVE identifier CVE-2025-27219. We recommend upgrading the cgi gem. Details CGI::Cookie.parse took super-linear time to parse a cookie string in some cases. Feeding a maliciously crafted cookie string into t...

7.5CVSS6.1AI score0.00849EPSS
SaveExploits0References9Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/02 9:20 a.m.•33 views

CVE-2025-22492

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software FRS VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS...

6.3CVSS5.7AI score0.00163EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2025/02/28 9:56 a.m.•14 views

SUSE-SU-2025:0737-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.20: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093...

8.1CVSS8.2AI score0.9003EPSS
SaveExploits10References3
NVD
NVD
•added 2025/02/28 9:15 a.m.•28 views

CVE-2025-22492

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software FRS VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS...

6.3CVSS0.00163EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/02/28 2:21 a.m.•16 views

SUSE CVE-2025-21772

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use putdevsector, since the preceding readpartsector succeeded. - If the partition table clai...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits0References86
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/27 1:13 p.m.•12 views

Security Bulletin: Vulnerability in Cross-Spawn affects watsonx.data

Summary Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service ReDoS . This can affect watsonx.data. Vulnerability Details CVEID:CVE-2024-21538 DESCRIPTION: Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denia...

8.7CVSS6.5AI score0.00868EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2025/02/27 12:20 p.m.•34 views

CVE-2025-1738 Multiple vulnerabilities in Trivision Camera NC227WF

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party...

6.2CVSS0.00172EPSS
SaveExploits2References1
osv_azl
osv_azl
•added 2025/02/27 3:15 a.m.•15 views

AZL-57836 CVE-2025-21787 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: team: better TEAMOPTIONTYPESTRING validation syzbot reported following splat 1 Make sure user-provided data contains one nul byte. 1 BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:633 inline BUG: KMSAN: uninit-value in...

5.5CVSS6.1AI score0.00272EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/02/27 3:15 a.m.•27 views

AZL-57935 CVE-2025-21787 affecting package kernel for versions less than 6.6.79.1-1

In the Linux kernel, the following vulnerability has been resolved: team: better TEAMOPTIONTYPESTRING validation syzbot reported following splat 1 Make sure user-provided data contains one nul byte. 1 BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:633 inline BUG: KMSAN: uninit-value in...

5.5CVSS6.1AI score0.00272EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/02/27 3:15 a.m.•20 views

DEBIAN-CVE-2025-21787

In the Linux kernel, the following vulnerability has been resolved: team: better TEAMOPTIONTYPESTRING validation syzbot reported following splat 1 Make sure user-provided data contains one nul byte. 1 BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:633 inline BUG: KMSAN: uninit-value in...

5.5CVSS6.3AI score0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder