Lucene search
+L

4081 matches found

Debian CVE
Debian CVE
•added 2025/03/13 4:40 p.m.•20 views

CVE-2024-9042

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below...

5.9CVSS6.7AI score0.01398EPSS
SaveExploits0
CVE
CVE
•added 2025/03/13 4:40 p.m.•293 views

CVE-2024-9042

CVE-2024-9042 affects Windows worker nodes in Kubernetes environments (vulnerability in kubelet/related components). Root cause: improper input validation (CWE-20). Impact as stated: potential confidentiality and integrity impact (C present; no availability impact) with CVSSv3.1 base score 5.9 (v...

5.9CVSS5.8AI score0.01398EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/13 4:40 p.m.•20 views

CVE-2024-9042

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below...

5.9CVSS6.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/03/13 4:40 p.m.•17 views

CVE-2024-9042

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below...

5.9CVSS5.8AI score0.01398EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/13 12:00 a.m.•7 views

CVE-2024-9042: Improper Input Validation

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below...

5.9CVSS6.5AI score0.01398EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/07 11:08 a.m.•12 views

OESA-2025-1234 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

7.7CVSS6.8AI score0.00422EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/07 11:08 a.m.•16 views

OESA-2025-1235 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

7.7CVSS6.8AI score0.00422EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/06 4:15 p.m.•18 views

AZL-62534 CVE-2025-21825 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpftimer through kworker for PREEMPTRT During the update procedure, when overwrite element in a pre-allocated htab, the freeing of oldelement is protected by the bucket lock. The reason why the bucket lock...

7.8CVSS6AI score0.0018EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-21823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors reachable over an interface. Some of the used...

7.8CVSS6.8AI score0.0024EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2021-42717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web serve...

7.5CVSS7.2AI score0.03249EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2022-21680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression block.def may cause catastrophic backtracking against some strings and...

7.5CVSS6.6AI score0.02852EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2024-40977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery e.g. chip reset, there is a possible situation that kernel worker...

5.5CVSS6.7AI score0.00247EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•36 views

Linux Distros Unpatched Vulnerability : CVE-2022-41742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R...

7.1CVSS7.1AI score0.01143EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
•added 2025/03/01 2:52 a.m.•15 views

SUSE CVE-2025-21823

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...

5.5CVSS7.6AI score0.0024EPSS
SaveExploits0References13
NVD
NVD
•added 2025/02/27 8:16 p.m.•30 views

CVE-2025-21823

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...

7.8CVSS0.0024EPSS
SaveExploits0References10
OSV
OSV
•added 2025/02/27 8:16 p.m.•7 views

DEBIAN-CVE-2025-21823

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...

5.5CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/27 8:06 p.m.•197 views

CVE-2025-21823

CVE-2025-21823 is about batman-adv in the Linux kernel where the unmanaged ELP metric worker was dropped. The issue arose because the ELP worker, which recalculates metrics for neighbors reachable over an interface, used locks that could sleep, conflicting with the RCU list iterator and risking i...

7.8CVSS6.3AI score0.0024EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
•added 2025/02/27 8:06 p.m.•36 views

CVE-2025-21823 batman-adv: Drop unmanaged ELP metric worker

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...

7.8CVSS0.0024EPSS
SaveExploits0References8
OSV
OSV
•added 2025/02/27 8:06 p.m.•22 views

CVE-2025-21823 batman-adv: Drop unmanaged ELP metric worker

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References13
Debian CVE
Debian CVE
•added 2025/02/27 2:07 a.m.•21 views

CVE-2025-21726

In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorderwork Although the previous patch can avoid ps and ps UAF for doserial, it can not avoid potential UAF issue for reorderwork. This issue can happen just as below: cryptorequest cryptorequest cryptodela...

7.8CVSS6.1AI score0.00236EPSS
SaveExploits0
Rows per page
Query Builder