Lucene search
+L

10064 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

MiracleLinux 4 : libxml2-2.7.6-8.4.0.1.AXS4 (AXSA:2013-01:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-01:01 advisory. This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and...

6.8CVSS8.8AI score0.04382EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/01/16 12:00 a.m.26 views

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

8.1CVSS0.00913EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.6 views

MiracleLinux 3 : libxml2-2.6.26-2.1.15.6.0.1.AXS3 (AXSA:2013-07:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-07:01 advisory. This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and...

6.8CVSS8.8AI score0.04382EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.6 views

MiracleLinux 7 : ruby-2.0.0.648-33.0.1.el7.AXS7 (AXSA:2018-2583:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2583:01 advisory. It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploi...

9.8CVSS8.7AI score0.73829EPSS
SaveExploits15References12
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.9 views

MiracleLinux 7 : mercurial-2.6.2-10.el7 (AXSA:2019-4114:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4114:01 advisory. mercurial: Buffer underflow in mpatch.c:mpatchapply CVE-2018-13347 mercurial: HTTP server permissions bypass CVE-2018-1000132 mercurial: Missing che...

9.8CVSS7.4AI score0.02667EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001179 advisory. The edgebulkincallback function in drivers/usb/serial/ioti.c in the Linux kernel before 4.10.4 allows local users to obtain sensitive information in the dmesg...

4.6CVSS6.2AI score0.0048EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2026/01/16 12:00 a.m.16 views

CVE-2025-62291

In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...

8.1CVSS6.8AI score0.00913EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/01/15 9:06 a.m.12 views

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

...

5.4AI score0.00175EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/01/15 9:02 a.m.8 views

caif: fix integer underflow in cffrml_receive()

...

8.1CVSS5.3AI score0.00285EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/15 2:26 a.m.8 views

CVE-2025-68775

A race condition flaw was found in the Linux kernel's network handshake subsystem. When duplicate handshake cancellation requests arrive for the same TLS handshake such as during SUNRPC/NFS TLS negotiation timeouts, the code fails to detect the duplicate and incorrectly manipulates the socket...

3.3CVSS5.4AI score0.00475EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/15 1:24 a.m.8 views

CVE-2025-68779

A use-after-free vulnerability was found in the Mellanox mlx5 Ethernet driver in the Linux kernel. The PSP Platform Security Processor component is unregistered twice during device removal - once in mlx5eremove and again in mlx5eniccleanup. This double unregistration causes a refcount underflow,...

5.5CVSS5.8AI score0.00162EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/01/15 12:26 a.m.15 views

SUSE CVE-2025-68779

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove - mlx5epspunregister mlx5eniccleanup - mlx5epspunregister This leads to a refcount underflow in some conditions: ------------ cut here -----------...

6.4AI score0.00162EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/01/15 12:26 a.m.9 views

SUSE CVE-2025-68786

In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current isize including 0, the code used to call checklockrangefilp, isize, size - 1, WRITE, which computes size - 1 and can underflow for...

6.8AI score0.00175EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/01/15 12:26 a.m.9 views

SUSE CVE-2025-68799

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

6.5CVSS6.3AI score0.00285EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.7 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001802 advisory. The 1 BPFSANCNLATTR and 2 BPFSANCNLATTRNEST extension implementations in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 do not chec...

4.9CVSS7.4AI score0.00602EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-68779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid unregistering PSP twice PSP is unregistered twice in: mlx5eremove -...

5.6AI score0.00162EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002124 advisory. The 1 BPFSANCNLATTR and 2 BPFSANCNLATTRNEST extension implementations in the skrunfilter function in net/core/filter.c in the Linux kernel through 3.14.3 do not chec...

4.9CVSS7.4AI score0.00602EPSS
SaveExploits1References20
RedhatCVE
RedhatCVE
added 2026/01/14 11:55 p.m.8 views

CVE-2025-71098

In the Linux kernel, the following vulnerability has been resolved: ip6gre: make ip6greheader robust Over the years, syzbot found many ways to crash the kernel in ip6greheader 1. This involves team or bonding drivers ability to dynamically change their dev-neededheadroom and/or dev-hardheaderlen ...

6.2CVSS5.7AI score0.00119EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/14 11:17 p.m.11 views

CVE-2025-68786

In the Linux kernel, the following vulnerability has been resolved: ksmbd: skip lock-range check on equal size to avoid size==0 underflow When size equals the current isize including 0, the code used to call checklockrangefilp, isize, size - 1, WRITE, which computes size - 1 and can underflow for...

6.1AI score0.00175EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/14 10:50 p.m.8 views

CVE-2025-68799

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

5.3AI score0.00285EPSS
SaveExploits0References4
Rows per page
Query Builder