Lucene search
+L

940 matches found

OSV
OSV
•added 2025/09/11 1:00 p.m.•19 views

UBUNTU-CVE-2025-58364

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

6.5CVSS6.7AI score0.01067EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/11 12:00 a.m.•5 views

CVE-2025-58364: Improper Input Validation

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

6.5CVSS5.7AI score0.01067EPSS
SaveExploits1References1
Gitee
Gitee
•added 2025/09/06 12:58 a.m.•129 views

Exploit for CVE-2021-34527

A PrintNightmare CVE-2021-34527 Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, it does not actually...

9CVSS7.5AI score0.99792EPSS
SaveExploits42
Gitee
Gitee
•added 2025/09/06 12:34 a.m.•116 views

Exploit for CVE-2021-1675

It Was All A Dream A CVE-2021-34527 a.k.a PrintNightmare Python Scanner. Allows you to scan entire subnets for the PrintNightmare RCE not the LPE and generates a CSV report with the results. Tests exploitability over MS-PAR and MS-RPRN. This tool has "de-fanged" versions of the Python exploits, i...

9.3CVSS7.7AI score0.99792EPSS
SaveExploits77
Microsoft CVE
Microsoft CVE
•added 2025/09/04 10:22 a.m.•35 views

WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified

...

6.9CVSS7AI score0.00634EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/09/02 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-30192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version...

7.5CVSS7.1AI score0.00239EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/08/30 6:17 p.m.•13 views

CVE-2025-8424

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access...

8.7CVSS6.5AI score0.03341EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/29 12:00 a.m.•12 views

Docker Desktop < 4.44.3 Container Escape

The version of Docker Desktop is prior to 4.44.3. It is therefore affected by a container escape vulnerability. The vulnerability allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with...

9.3CVSS7.9AI score0.0186EPSS
SaveExploits15References3
Positive Technologies
Positive Technologies
•added 2025/08/29 12:00 a.m.•16 views

PT-2025-37253

Name of the Vulnerable Software and Affected Versions: CUPS versions 2.4.12 and earlier Description: CUPS Common Unix Printing System is an open-source printing system for Linux and Unix-like operating systems. Versions 2.4.12 and earlier are susceptible to a remote denial of service due to unsaf...

6.5CVSS7.1AI score0.01067EPSS
SaveExploits1References101
SUSE CVE
SUSE CVE
•added 2025/08/28 11:22 p.m.•14 views

SUSE CVE-2025-40779

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

7.5CVSS6.9AI score0.00539EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/08/28 9:41 p.m.•11 views

CVE-2025-40779

A vulnerability was found in Kea. When an attacker who is an existing client with an assigned IP sends a crafted unicast packet directly to the server's IP and Kea cannot find any subnets that match that client's credentials, the server crashes causing a Denial of Service via assertion/NULL-path...

7.5CVSS6.3AI score0.00539EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/27 9:15 p.m.•14 views

CVE-2025-40779

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

7.5CVSS7AI score
SaveExploits0References2
NVD
NVD
•added 2025/08/27 9:15 p.m.•11 views

CVE-2025-40779

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

7.5CVSS0.00539EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/27 9:15 p.m.•13 views

UBUNTU-CVE-2025-40779

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

7.5CVSS5.8AI score0.00539EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/08/27 8:23 p.m.•29 views

CVE-2025-40779 Kea crash upon interaction between specific client options and subnet selection

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

7.5CVSS0.00539EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/27 8:23 p.m.•8 views

CVE-2025-40779 Kea crash upon interaction between specific client options and subnet selection

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

7.5CVSS6.3AI score0.00539EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/27 8:23 p.m.•63 views

CVE-2025-40779

CVE-2025-40779 affects Kea DHCP server: when a DHCPv4 client unicast request includes specific options and Kea cannot select a subnet, kea-dhcp4 aborts with an assertion. Affected versions are Kea 2.7.1–2.7.9, 3.0.0, and 3.1.0. Public advisories and Nessus plugins indicate fixes in Kea 3.0.1 (and...

7.5CVSS7.1AI score0.00539EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2018-14663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record b...

5.9CVSS6.3AI score0.02572EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2025/08/27 12:00 a.m.•11 views

ISC KEA -- kea-dhcp4 aborts if client sends a broadcast request with particular options

Internet Systems Consortium, Inc. reports: We corrected an issue in kea-dhcp4 that caused the server to abort if a client sent a broadcast request with particular options, and Kea failed to find an appropriate subnet for that client. This addresses CVE-2025-40779 4055, 4048...

7.5CVSS6.7AI score0.00539EPSS
SaveExploits0
NVD
NVD
•added 2025/08/26 2:15 p.m.•9 views

CVE-2025-8424

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access...

8.7CVSS0.03341EPSS
SaveExploits0References1
Rows per page
Query Builder