Lucene search
+L

7232 matches found

OSV
OSV
added 2025/10/28 11:48 a.m.7 views

CVE-2025-40058 iommu/vt-d: Disallow dirty tracking if incoherent page walk

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

8.8CVSS6.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/10/28 11:48 a.m.18 views

CVE-2025-40058

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

8.8CVSS5.2AI score0.00152EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/10/28 11:48 a.m.12 views

CVE-2025-40058 iommu/vt-d: Disallow dirty tracking if incoherent page walk

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must...

8.8CVSS0.00152EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/28 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing dirty page tracking when the IOMMU is in non-consistent mode, which could lead to unrecoverable...

5.9AI score0.00152EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/28 12:00 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-40058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure...

8.8CVSS5.9AI score0.00152EPSS
SaveExploits0References3
Schneier on Security
Schneier on Security
added 2025/10/27 11:08 a.m.16 views

First Wap: A Surveillance Computer You’ve Never Heard Of

Mother Jones has a long article on surveillance arms manufacturers, their wares, and how they avoid export control laws: Operating from their base in Jakarta, where permissive export laws have allowed their surveillance business to flourish, First Wap's European founders and executives have quiet...

6.9AI score
SaveExploits0
NVD
NVD
added 2025/10/27 8:15 a.m.11 views

CVE-2025-12249

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now...

6.5CVSS0.0027EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/27 8:02 a.m.24 views

CVE-2025-12249 Axosoft Scrum and Bug Tracking Edit Ticket csv injection

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now...

6.5CVSS0.0027EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/27 8:02 a.m.8 views

CVE-2025-12249 Axosoft Scrum and Bug Tracking Edit Ticket csv injection

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now...

6.5CVSS6.4AI score0.0027EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/27 8:02 a.m.71 views

EUVD-2025-36134

A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the attack remotely. The exploit is now...

6.5CVSS6.3AI score0.0027EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/27 12:00 a.m.5 views

CVE-2025-60291

An issue was discovered in eTimeTrackLite Web thru 12.0 20250704. There is a permission control flaw that allows unauthorized attackers to access specific routes and modify database connection configurations...

6.4AI score0.00312EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:00 a.m.8 views

Siemens SIMATIC Devices Improper Handling of Structural Elements (CVE-2024-35877)

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: fix VMPAT handling in COW mappings PAT handling won't do the right thing in COW mappings: the first PTE or, in fact, all PTEs can be replaced during write faults to point at anon folios. Reliably recovering the correc...

5.5CVSS6.3AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/24 12:00 a.m.14 views

PT-2025-51619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the netfilter module related to Network Address Translation NAT and connection tracking conntrack. Specifically, the problem arises when handlin...

7.5CVSS5.4AI score0.00677EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/10/22 11:59 p.m.10 views

SUSE CVE-2023-53720

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

6.5AI score0.00172EPSS
SaveExploits0References3
Hacker One
Hacker One
added 2025/10/22 9:30 p.m.22 views

curl: Use of Deprecated strcpy() with User-Controlled Environment Variable in Memory Debug Initialization

Discovery Method Step 1: Initial Security Scan Find all files using dangerous string functions find src/ -name ".c" -exec grep -l "strcpy|strcat|sprintf|gets" ; OUTPUT: src/toolprogress.c src/toolmain.c Step 2: Locate Vulnerable Code in Main.c Find exact strcpy usage in toolmain.c grep -n...

7.8AI score
SaveExploits0
NVD
NVD
added 2025/10/22 2:15 p.m.11 views

CVE-2023-53720

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

0.00172EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/22 1:23 p.m.11 views

CVE-2023-53720 net/mlx5e: Release the label when replacing existing ct entry

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

6.4AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/22 1:23 p.m.20 views

CVE-2023-53720 net/mlx5e: Release the label when replacing existing ct entry

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

0.00172EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/22 12:00 a.m.14 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to release a tag map when replacing an existing ct entry, which could lead to a memory leak...

6.1AI score0.00172EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/10/22 12:00 a.m.7 views

Active Localization of Close-Range Adversarial Acoustic Sources for Underwater Data Center Surveillance

Underwater data infrastructures offer natural cooling and enhanced physical security compared to terrestrial facilities, but are susceptible to acoustic injection attacks that can disrupt data integrity and availability. This work presents a comprehensive surveillance framework for localizing and...

6.9AI score
SaveExploits0
Rows per page
Query Builder