Lucene search
+L

6988 matches found

The Hacker News
The Hacker News
•added 2025/01/02 7:25 a.m.•11 views

Three Russian-German Nationals Charged with Espionage for Russian Secret Service

German prosecutors have charged three Russian-German nationals for acting as secret service agents for Russia. The individuals, named Dieter S., Alexander J., and Alex D., have been accused of working for a foreign secret service. Dieter S. is also alleged to have participated in sabotage...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•23 views

PT-2025-30853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the bnxt en module of the Linux kernel related to DMA unmapping when transmitting XDP REDIRECT packets. Specifically, the dma unmap len set function was called with an...

9.8CVSS6.8AI score0.00544EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2025-30754

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's DRM/MSM/GPU subsystem that can lead to a crash when throttling the GPU immediately during boot. This occurs when the GPU is already hot during boot an...

5.5CVSS6.5AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•20 views

PT-2026-8126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to IOMMU and stale IOTLB entries within the kernel address space. The issue involves the need to invalidate IOTLB paging cache entries before...

8.8CVSS5.8AI score0.00133EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2026-7116

Name of the Vulnerable Software and Affected Versions GnuTLS affected versions not specified Description A flaw exists in GnuTLS that can lead to a denial of service DoS. This occurs due to excessive CPU and memory consumption when processing maliciously crafted certificates. These certificates...

5.3CVSS5.4AI score0.00666EPSS
SaveExploits1References160
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•13 views

PT-2024-37065 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically related to the GFX9 hardware support. The issue concerned the cleaner shader, where an omission in the previous patc...

5.5CVSS7.5AI score0.00178EPSS
SaveExploits0References11
osv_ubuntu
osv_ubuntu
•added 2024/12/28 10:15 a.m.•14 views

UBUNTU-CVE-2024-56706

In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Fix and protect memory allocation of SDBs with mutex Reservation of the PMU hardware is done at first event creation and is protected by a pair of mutexlock and mutexunlock. After reservation of the PMU hardware the...

7.8CVSS6.5AI score0.00166EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
•added 2024/12/24 8:21 a.m.•14 views

Security update for vhostmd

This update for vhostmd fixes the following issues: Updated to version 1.2 Fix actions using the 'free' command Fix buffer accounting when generating metric XML Change actions to retrieve vendor and product info Add a 'unit' attribute to the metrics element vif-stats.py: convert to Python3 conf:...

7.5AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/12/19 12:00 a.m.•3 views

PT-2025-9960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash can occur in the Linux kernel during the unbind process of a device if a gpio unit is in use. This happens because the wrong device is used for device managed functions,...

7.8CVSS0.0021EPSS
SaveExploits0
Ubuntu
Ubuntu
•added 2024/12/18 1:05 p.m.•35 views

USN-7171-1: PHPUnit vulnerability

It was discovered that PHPUnit incorrectly handled web requests if exposed to the internet. An attacker could possibly use this issue to achive remote code execution or obtain sensitive information...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits23
osv_oesa
osv_oesa
•added 2024/12/13 11:08 a.m.•20 views

OESA-2024-2550 linux-firmware security update

This package contains firmware images required by some devices. Security Fixes: IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in...

5.3CVSS6.7AI score0.00214EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/12/12 12:00 a.m.•19 views

NVIDIA GPU Display Driver RCE

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS6.2AI score0.00415EPSS
SaveExploits0References4Affected Software15
CNVD
CNVD
•added 2024/12/11 12:00 a.m.•28 views

Siemens SICAM A8000 CP-8031 and CP-8050 Firmware Decryption Vulnerability

The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply. A firmware decryption vulnerability exists in the Siemens SICAM A8000 CP-8031 and CP-8050 due to the fact that the affected devices contain a secure element...

5.1CVSS7.4AI score0.00286EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/12/11 12:00 a.m.•15 views

Linux kernel IOMMU DoS

The vulnerability of the iommu/vt-d components in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of these components has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00236EPSS
SaveExploits0References10Affected Software4
NVD
NVD
•added 2024/12/05 8:15 p.m.•26 views

CVE-2023-48010

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets...

9.8CVSS0.00458EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/05 12:00 a.m.•13 views

CVE-2023-48010

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets...

9.7AI score0.00458EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/05 12:00 a.m.•77 views

CVE-2023-48010

The STMicroelectronics SPC58 family of PowerPC microcontrollers is vulnerable to a Missing Protection Mechanism for Alternate Hardware Interface . Code executing with Supervisor privileges can disable the System Memory Protection Unit (MPU) , which allows an attacker to gain unabridged read/write...

9.8CVSS7.2AI score0.00458EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•10 views

CVE-2023-48010: Insufficiently Protected Credentials

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets...

9.8CVSS5.8AI score0.00458EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2024/12/04 4:13 p.m.•58 views

Proactively Managing High-Risk Vulnerabilities with TruRisk Mitigate™

In late 2024, organizations faced over 65 million detections from three critical vulnerabilities—CVE-2013-2900, CVE-2024-38122, and CVE-2024-30078—underscoring the urgent need for proactive vulnerability management. Adding to these challenges, the Qualys Threat Research Unit TRU uncovered five...

8.8CVSS7.5AI score0.21269EPSS
SaveExploits17
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•29 views

PT-2025-3582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the scsi: mpi3mr driver. The driver exposes a sysfs interface to enable or disable PHYs in a controller/expander setup...

7.3CVSS5.4AI score0.00186EPSS
SaveExploits0
Rows per page
Query Builder