Lucene search
+L

39770 matches found

NVD
NVD
•added 2026/05/15 3:16 a.m.•34 views

CVE-2025-0028

An unchecked return value within the AMD Platform Management Framework PMF could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability...

8.3CVSS0.00104EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/15 3:04 a.m.•43 views

EUVD-2026-30502

Unrestricted IP address binding in the AMD Device Metrics Exporter ROCm ecosystem could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability...

9.2CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/15 3:04 a.m.•84 views

CVE-2026-0481

Unrestricted IP address binding in the AMD Device Metrics Exporter ROCm ecosystem could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability...

9.2CVSS0.00308EPSS
SaveExploits0References1
Circl
Circl
•added 2026/05/15 3:00 a.m.•28 views

CVE-2020-17103

creationtimestamp| type| source ---|---|--- 2026-05-15 03:00:06+00:00| published-proof-of-concept| Telegram/4tIKexrP1B7eYtOW91-QaKQ8EIqNMri3pu2CJIQ1mA899I 2026-05-16 09:09:16+00:00| seen| https://t.me/P0x3k1N73LL1G3NC3/354 2026-05-16 09:41:16+00:00| seen|...

7.8CVSS7.1AI score0.22151EPSS
SaveExploits1References20
SUSE CVE
SUSE CVE
•added 2026/05/15 2:00 a.m.•26 views

SUSE CVE-2026-8328

The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...

5.3CVSS6AI score0.00457EPSS
SaveExploits0References30
CVE
CVE
•added 2026/05/15 1:52 a.m.•50 views

CVE-2025-0028

The AMD PMF (Platform Management Framework) vulnerability CVE-2025-0028 stems from an unchecked return value in the PMF that could enable a local attacker to read or modify an arbitrary address, risking confidentiality, integrity, and availability. The issue is tied to the AMD chipset driver/PMF ...

8.3CVSS6.1AI score0.00104EPSS
SaveExploits0References1
Circl
Circl
•added 2026/05/15 1:25 a.m.•42 views

CVE-2026-44678

creationtimestamp| type| source ---|---|--- 2026-05-15 01:25:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu6eulmmq2o...

7.1CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/15 12:00 a.m.•11 views

CVE-2025-0028: Unchecked Return Value

An unchecked return value within the AMD Platform Management Framework PMF could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability...

8.3CVSS6.1AI score0.00104EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/15 12:00 a.m.•25 views

AMD Graphics Driver security vulnerabilities

AMD Graphics Driver is an integrated graphics driver developed by American semiconductor company AMD. There is a security vulnerability in AMD Graphics Driver, which stems from the unlimited binding of IP addresses. This vulnerability could allow remote attackers to make unauthorized changes to G...

9.2CVSS5.9AI score0.00308EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/05/14 11:33 p.m.•13 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the HTTP-based namespace verification process. An attacker can access internal or private network resources by supplying specially crafted IPv6 addresses that bypass the intended address allowlist...

6.3CVSS8.2AI score0.00286EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2026/05/14 10:38 p.m.•11 views

openbabel:fuzz_smart: Heap-use-after-free in OpenBabel::FreeBondExpr

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6020044852363264 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzsmart Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2026/05/14 9:56 p.m.•32 views

libcoap:persist_fuzzer: Crash in persist_target.c

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=5113338735689728 Project: libcoap Fuzzing Engine: afl Fuzz Target: persistfuzzer Job Type: aflasanlibcoap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x75ecbaf14510 Crash State:...

5.4AI score
SaveExploits0
Snyk
Snyk
•added 2026/05/14 9:24 p.m.•15 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

7.5CVSS8.4AI score0.00389EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:24 p.m.•18 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

7.5CVSS8.4AI score0.00389EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:24 p.m.•13 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

7.5CVSS8.4AI score0.00389EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:24 p.m.•13 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

7.5CVSS8.4AI score0.00389EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:22 p.m.•16 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

6.9CVSS8.4AI score0.0043EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:22 p.m.•13 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

6.9CVSS8.4AI score0.0043EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:22 p.m.•14 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

6.9CVSS8.4AI score0.0043EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/14 9:22 p.m.•15 views

User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation due to the reliance on client-supplied IP address headers such as X-Forwarded-For, X-Real-IP, and True-Client-IP. An attacker can circumvent per-IP rate limiting by supplying arbitrary values in these headers, causing...

6.9CVSS8.4AI score0.0043EPSS
SaveExploits0References2
Rows per page
Query Builder