Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-25944

Malicious code in bioql PyPI...

8.7CVSS9AI score0.00502EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:27 a.m.3 views

CVE-2023-25944

Uncontrolled search path element in some IntelR VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.0007EPSS
Exploits0References1
Circl
Circl
added 2025/02/20 2:16 a.m.1 views

CVE-2025-25944

creationtimestamp| type| source ---|---|--- 2025-02-20 02:16:37+00:00| seen| https://t.me/cvedetector/18493...

7.3CVSS4.8AI score0.00267EPSS
Exploits1References1
OSV
OSV
added 2025/02/19 11:15 p.m.4 views

CVE-2025-25944

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4RtpAtom::AP4RtpAtom, during the execution of mp4fragment with a crafted MP4 input file...

7.3CVSS7.5AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/19 12:0 a.m.6 views

CVE-2025-25944

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4RtpAtom::AP4RtpAtom, during the execution of mp4fragment with a crafted MP4 input file...

7.4AI score0.00267EPSS
Exploits1References1
CVE
CVE
added 2024/03/29 4:30 p.m.81 views

CVE-2024-25944

CVE-2024-25944 affects Dell OpenManage Enterprise (Dell OpenManage Enterprise, v4.0 and prior). A path traversal vulnerability allows an unauthenticated attacker to access files on the server filesystem with the web application’s privileges. Connected sources confirm versions 4.0 and earlier are ...

7.5CVSS5.8AI score0.00397EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/29 4:30 p.m.11 views

CVE-2024-25944

Dell OpenManage Enterprise, v4.0 and prior, contains a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privileges of the running web application...

5.7CVSS6.1AI score0.00397EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/08/11 2:37 a.m.14 views

CVE-2023-25944

Uncontrolled search path element in some IntelR VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS8AI score0.0007EPSS
Exploits0References1
CVE
CVE
added 2023/08/11 2:37 a.m.33 views

CVE-2023-25944

CVE-2023-25944 concerns an uncontrolled search path element in Intel® VCUST Tool software downloaded before February 3, 2023, which may allow an authenticated user to escalate privileges via local access. Affected product: Intel® VCUST Tool versions prior to those downloaded on February 3, 2023. ...

7.8CVSS7.7AI score0.0007EPSS
Exploits0References1Affected Software1
Intel
Intel
added 2023/08/08 12:0 a.m.16 views

Intel® VCUST Tool Advisory

Summary: A potential security vulnerability in some Intel® VCUST Tool software may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-25944 Description: Uncontrolled search path element in some Intel...

7.8CVSS7.1AI score0.0007EPSS
Exploits0
Circl
Circl
added 2022/05/24 7:3 p.m.3 views

CVE-2021-25944

creationtimestamp| type| source ---|---|--- 2022-05-24 19:03:10+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h6xg-rg33-9mf4...

9.8CVSS7.3AI score0.0254EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/05/25 6:26 p.m.10 views

CVE-2021-25944

Prototype pollution vulnerability in 'deep-defaults' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution...

9.8AI score0.0254EPSS
Exploits1References1
CVE
CVE
added 2021/05/25 6:26 p.m.53 views

CVE-2021-25944

CVE-2021-25944 relates to a prototype pollution flaw in the npm module deep-defaults affecting versions 1.0.0–1.0.5. The root cause is that the internal function _deepDefaults() assigns properties without validating the input type, enabling an attacker to pollute Object.prototype (e.g., via malic...

9.8CVSS9.5AI score0.0254EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder