Aggregator

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.12.10. This affects the function get_canonical_dev_path. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2025-21679. The attack must be carried out from within the local network. There is no available exploit. It is suggested to upgrade the affected component.

vuldb.com

CVE-2025-21678 | Linux Kernel up to 5.15.176/6.1.126/6.6.73/6.12.10 drivers/net/gtp.c gtp_newlink iteration (Nessus ID 215144 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 5.15.176/6.1.126/6.6.73/6.12.10. Affected is the function gtp_newlink in the library lib/ref_tracker.c of the file drivers/net/gtp.c. Such manipulation leads to excessive iteration. This vulnerability is referenced as CVE-2025-21678. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.

vuldb.com

CVE-2025-21680 | Linux Kernel up to 5.15.176/6.1.126/6.6.73/6.12.10 net/core/pktgen.c get_imix_entries array index (Nessus ID 215144 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability described as problematic has been identified in Linux Kernel up to 5.15.176/6.1.126/6.6.73/6.12.10. This vulnerability affects the function get_imix_entries in the library lib/dump_stack.c of the file net/core/pktgen.c. The manipulation results in improper validation of array index. This vulnerability is cataloged as CVE-2025-21680. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is recommended.

vuldb.com

CVE-2025-21677 | Linux Kernel up to 6.12.10 drivers/net/pfcp.c pfcp_newlink iteration (Nessus ID 230688 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.10. Affected by this vulnerability is the function pfcp_newlink in the library lib/ref_tracker.c of the file drivers/net/pfcp.c. Performing a manipulation results in excessive iteration. This vulnerability is identified as CVE-2025-21677. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.

vuldb.com

CVE-2026-23160 | Linux Kernel up to 6.6.122/6.12.68/6.18.8 octeon_ep octep_device_setup memory leak (Nessus ID 299222)

Vuldb Updates

4 months 1 week ago

A vulnerability classified as critical was found in Linux Kernel up to 6.6.122/6.12.68/6.18.8. Impacted is the function octep_device_setup of the component octeon_ep. Such manipulation leads to memory leak. This vulnerability is referenced as CVE-2026-23160. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is advised.

vuldb.com

CVE-2026-23164 | Linux Kernel up to 6.18.8 rocker_world_port_post_fini memory leak (Nessus ID 299225)

Vuldb Updates

4 months 1 week ago

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.8. Impacted is the function rocker_world_port_post_fini. The manipulation results in memory leak. This vulnerability is reported as CVE-2026-23164. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.

vuldb.com

25 Vulnerabilities in Cloud Password Managers Allow Unauthorized Access and Modifications

Cyber Security News

4 months 1 week ago

Researchers from ETH Zurich have uncovered 25 serious vulnerabilities in three leading cloud-based password managers: Bitwarden, LastPass, and Dashlane. These flaws enable a malicious server to bypass zero-knowledge encryption claims, allowing unauthorized access, modification, and recovery of users’ stored passwords and vault data. Bitwarden, LastPass, and Dashlane collectively serve over 60 million users and hold […]

The post 25 Vulnerabilities in Cloud Password Managers Allow Unauthorized Access and Modifications appeared first on Cyber Security News.

Guru Baran

RALord

Dark Feed IO

4 months 1 week ago

You must login to view this content

cohenido

CVE-2025-21675 | Linux Kernel up to 6.1.126/6.6.73/6.12.10 mlx5_lag_destroy_definers null pointer dereference (Nessus ID 215144 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability was found in Linux Kernel up to 6.1.126/6.6.73/6.12.10. It has been declared as problematic. This affects the function mlx5_lag_destroy_definers. The manipulation results in null pointer dereference. This vulnerability was named CVE-2025-21675. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.

vuldb.com

CVE-2025-21672 | Linux Kernel up to 6.12.10 fs/afs/addr_prefs.c afs_split_string locking (Nessus ID 234757 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.12.10. The impacted element is the function afs_split_string of the file fs/afs/addr_prefs.c. The manipulation results in improper locking. This vulnerability is identified as CVE-2025-21672. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

vuldb.com

CVE-2025-21673 | Linux Kernel up to 6.6.73/6.12.10 cifs_put_tcp_session double free (Nessus ID 216456 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability labeled as problematic has been found in Linux Kernel up to 6.6.73/6.12.10. This impacts the function cifs_put_tcp_session. Such manipulation leads to double free. This vulnerability is listed as CVE-2025-21673. The attack must be carried out from within the local network. There is no available exploit. The affected component should be upgraded.

vuldb.com

CVE-2025-21674 | Linux Kernel up to 6.6.73/6.12.10 _bh denial of service (Nessus ID 216191 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability classified as problematic was found in Linux Kernel up to 6.6.73/6.12.10. Impacted is the function _bh. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2025-21674. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is advised.

vuldb.com

CVE-2025-21670 | Linux Kernel up to 6.6.73/6.12.10 vsock_bpf_recvmsg null pointer dereference (Nessus ID 216395 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability described as problematic has been identified in Linux Kernel up to 6.6.73/6.12.10. Affected by this vulnerability is the function vsock_bpf_recvmsg. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2025-21670. The attack requires access to the local network. No exploit is available. Upgrading the affected component is recommended.

vuldb.com

CVE-2025-21671 | Linux Kernel up to 6.1.126/6.6.73/6.12.10 zram_meta_alloc uninitialized pointer (Nessus ID 215144 / WID-SEC-2025-0232)

Vuldb Updates

4 months 1 week ago

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.1.126/6.6.73/6.12.10. Affected is the function zram_meta_alloc. Performing a manipulation results in uninitialized pointer. This vulnerability is cataloged as CVE-2025-21671. The attack must originate from the local network. There is no exploit available. It is suggested to upgrade the affected component.

vuldb.com

CVE-2023-46535 | TP-Link TL-WR886N 7.0_3.0.14_Build_221115_Rel.56908n.bin getResetVeriRegister stack-based overflow (EUVD-2023-50741)

Vuldb Updates

4 months 1 week ago

A vulnerability labeled as critical has been found in TP-Link TL-WR886N 7.0_3.0.14_Build_221115_Rel.56908n.bin. Affected by this vulnerability is the function getResetVeriRegister. Such manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2023-46535. The attack requires being on the local network. There is not any exploit available.

vuldb.com

CVE-2023-46536 | TP-Link TL-WR886N 7.0_3.0.14_Build_221115_Rel.56908n.bin chkRegVeriRegister stack-based overflow (EUVD-2023-50742)

Vuldb Updates

4 months 1 week ago

A vulnerability marked as critical has been reported in TP-Link TL-WR886N 7.0_3.0.14_Build_221115_Rel.56908n.bin. Affected by this issue is the function chkRegVeriRegister. Performing a manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2023-46536. The attacker must have access to the local network to execute the attack. No exploit exists.

vuldb.com

Aggregator

Managed ad