Lucene search
K

3050 matches found

OSV
OSV
added 2025/01/21 12:15 p.m.9 views

AZL-55901 CVE-2024-57938 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctpassociationinit While by default maxautoclose equals to INTMAX / HZ, one may set net.sctp.maxautoclose to UINTMAX. There is code in sctpassociationinit that can consequently...

5.5CVSS5.8AI score0.00207EPSS
Exploits0References1
NVD
NVD
added 2025/01/15 1:15 p.m.15 views

CVE-2024-57899

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems On 32-bit systems, the size of an unsigned long is 4 bytes, while a u64 is 8 bytes. Therefore, when using oreachsetbitbit, &bits, sizeofchanged BITSPERBYTE, the...

7.8CVSS0.00221EPSS
Exploits0References3
NVD
NVD
added 2025/01/14 2:15 p.m.14 views

CVE-2024-7344

Howyar UEFI Application "Reloader" 32-bit and 64-bit is vulnerable to execution of unsigned software in a hardcoded path...

8.2CVSS0.01036EPSS
Exploits1References6
OSV
OSV
added 2025/01/14 2:15 p.m.3 views

CVE-2024-7344

Howyar UEFI Application "Reloader" 32-bit and 64-bit is vulnerable to execution of unsigned software in a hardcoded path...

8.2CVSS5.9AI score0.01036EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/01/14 1:29 p.m.23 views

CVE-2024-7344 Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Howyar UEFI Application "Reloader" 32-bit and 64-bit is vulnerable to execution of unsigned software in a hardcoded path...

0.01036EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/01/14 1:29 p.m.13 views

CVE-2024-7344 Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Howyar UEFI Application "Reloader" 32-bit and 64-bit is vulnerable to execution of unsigned software in a hardcoded path...

6.9AI score0.01036EPSS
Exploits1References4
CVE
CVE
added 2025/01/14 1:29 p.m.336 views

CVE-2024-7344

Public documents provided do not include detailed technical information for CVE-2024-7344 (Howyar UEFI Reloader). No vendor advisories with root cause, impact, or remediation are present here. Monitor sources for updates.

8.2CVSS6.6AI score0.01036EPSS
In wildExploits1References6Affected Software7
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.6 views

Howyar UEFI Reloader 安全漏洞

Howyar UEFI Reloader is a UEFI Unified Extensible Firmware Interface related utility software from Howyar, primarily used for firmware loading and management. A security vulnerability exists in Howyar UEFI Reloader that originates from the execution of unsigned software in a hard-coded path. The...

8.2CVSS9.1AI score0.01036EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.4 views

PT-2025-1110

Name of the Vulnerable Software and Affected Versions Howyar UEFI Application "Reloader" 32-bit and 64-bit versions prior to January 2025 Description A vulnerability exists in the Howyar UEFI Application "Reloader" that allows for the execution of unsigned software in a hardcoded path. This flaw,...

8.2CVSS8.1AI score0.01036EPSS
Exploits1References195
CERT
CERT
added 2025/01/14 12:0 a.m.38 views

Howyar Reloader UEFI bootloader vulnerable to unsigned software execution

Overview The Howyar UEFI Application "Reloader" 32-bit and 64-bit, distributed as part of SysReturn prior to version 10.2.02320240919, is vulnerable to the execution of arbitrary software from a hard-coded path. An attacker who successfully exploits this vulnerability can bypass the UEFI Secure...

8.2CVSS9.5AI score0.01036EPSS
Exploits1References13
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.23 views

CVE-2023-0215 affecting package shim-unsigned-x64 15.8-1

CVE-2023-0215 affecting package shim-unsigned-x64 15.8-1. This CVE either no longer is or was never applicable...

7.5CVSS8.3AI score0.04494EPSS
Exploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.26 views

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5. This CVE either no longer is or was never applicable...

7.5CVSS8.2AI score0.04494EPSS
Exploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.23 views

CVE-2023-0215 affecting package shim-unsigned-x64 15.4-2

CVE-2023-0215 affecting package shim-unsigned-x64 15.4-2. This CVE either no longer is or was never applicable...

7.5CVSS8.4AI score0.04494EPSS
Exploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.16 views

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5

CVE-2023-0215 affecting package shim-unsigned-aarch64 15-5. This CVE either no longer is or was never applicable...

7.5CVSS8.4AI score0.04494EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/01/11 12:21 a.m.1 views

SUSE CVE-2024-56615

In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, causes the OOB writes. Fix is simple as...

5.5CVSS7.5AI score0.00257EPSS
Exploits0References14
SUSE CVE
SUSE CVE
added 2025/01/09 12:21 a.m.1 views

SUSE CVE-2024-56614

In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...

5.5CVSS7.6AI score0.00255EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2025/01/08 12:0 a.m.8 views

PT-2025-4348

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.127 Linux kernel versions prior to 6.6.74 Linux kernel versions prior to 6.12.11 Description The issue is related to the iomap write delalloc scan function in the Linux kernel, which can lead to an infinite...

5.5CVSS7.1AI score0.00193EPSS
Exploits0
OSV
OSV
added 2025/01/06 6:15 p.m.1 views

UBUNTU-CVE-2024-55627

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer...

7.5CVSS6AI score0.00984EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/01/06 12:0 a.m.3 views

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8, which stems from an unsigned integer underflow, where a specially crafted TCP stream may cause a very large buffer overflow when padded...

7.5CVSS6.7AI score0.00984EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2024/12/28 3:51 a.m.1 views

SUSE CVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

7.8CVSS7.4AI score0.00225EPSS
Exploits0References65
Rows per page
Query Builder