Lucene search
K

42 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.0 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001244)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001244 advisory. Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive...

5.5CVSS6.4AI score0.00053EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002809 advisory. Incorrect error handling in the setmempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive...

5.5CVSS6.4AI score0.00053EPSS
Exploits0References11
OSV
OSV
added 2025/11/25 10:50 p.m.2 views

JLSEC-2025-324 A flaw was found in rsync which could be triggered when rsync compares file checksums

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

7.5CVSS6.4AI score0.1902EPSS
Exploits2References27
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-3566

Malicious code in bioql PyPI...

5.3CVSS6.8AI score0.01008EPSS
Exploits0References55
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-12085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length t...

7.5CVSS7.2AI score0.1902EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:20 a.m.1 views

CVE-2024-29780

In hwbccnsdeprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.6AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:32 a.m.2 views

CVE-2019-14060

Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to lack of check of return value for read or write blob in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

7.8CVSS7.1AI score0.00033EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/02/03 1:10 a.m.1 views

rsync: Info Leak via Uninitialized Stack Contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

7.5CVSS7AI score0.1902EPSS
Exploits2References5
OSV
OSV
added 2025/01/21 1:1 p.m.1 views

CLSA-2025-1737464476 rsync: Fix of CVE-2024-12085

CVE-2024-12085: prevent leak of uninitialised stack data in hashsearch...

7.5CVSS7.3AI score0.1902EPSS
Exploits2References1
RedHat Linux
RedHat Linux
added 2025/01/15 6:42 a.m.4 views

rsync: Info Leak via Uninitialized Stack Contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

7.5CVSS7AI score0.1902EPSS
Exploits2References5
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2025:0120-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.1902EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2025/01/15 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2025:0121-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.1902EPSS
Exploits4References2
Cvelist
Cvelist
added 2025/01/14 5:37 p.m.15 views

CVE-2024-12085 Rsync: info leak via uninitialized stack contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

7.5CVSS0.1902EPSS
Exploits2References24
Cvelist
Cvelist
added 2024/06/13 9:1 p.m.19 views

CVE-2024-29780

In hwbccnsdeprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 9:1 p.m.19 views

CVE-2024-29780

In hwbccnsdeprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5AI score0.0003EPSS
Exploits0References1
OSV
OSV
added 2024/06/01 12:0 a.m.4 views

PUB-A-324894466

In hwbccnsdeprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.2AI score0.0003EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/05/21 3:15 p.m.20 views

CVE-2021-47339

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for driver ioctl handlers...

5.5CVSS5.9AI score0.00018EPSS
Exploits0References5
CVE
CVE
added 2024/05/21 2:35 p.m.83 views

CVE-2021-47339

In CVE-2021-47339, the Linux kernel fix targets media: v4l2-core, addressing uninitialized kernel stack data that could be used as input for driver ioctl handlers due to mistakes in compat ioctl implementation. The resolution requires explicitly clearing the entire ioctl input buffer before conve...

5.5CVSS6.5AI score0.00018EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2024/05/21 2:35 p.m.20 views

CVE-2021-47339

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: explicitly clear ioctl input data As seen from a recent syzbot bug report, mistakes in the compat ioctl implementation can lead to uninitialized kernel stack data getting used as input for driver ioctl handlers...

5.5CVSS4.4AI score0.00018EPSS
Exploits0
CNNVD
CNNVD
added 2024/05/21 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from uninitialized kernel stack data being used as input to the driver ioctl handler...

5.5CVSS4.2AI score0.00018EPSS
Exploits0References4
Rows per page
Query Builder