Lucene search
+L

24008 matches found

Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•8 views

PT-2025-9261

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description The issue is related to a missing bounds check, which could lead to a system crash and result in a remote denial of service. This can occur if a UE connects to a rogue base station controlled b...

6.5CVSS0.00365EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•9 views

CVE-2025-20644: Improper Validation of Syntactic Correctness of Input

In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS6.1AI score0.00381EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•9 views

CVE-2025-20647: NULL Pointer Dereference

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

6.5CVSS5.9AI score0.00365EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/03/03 12:00 a.m.•18 views

SUSE: Security Advisory (SUSE-SU-2025:0744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.5AI score0.07723EPSS
SaveExploits4References12
OpenVAS
OpenVAS
•added 2025/03/03 12:00 a.m.•15 views

SUSE: Security Advisory (SUSE-SU-2025:0752-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.8AI score0.02084EPSS
SaveExploits1References10
OpenVAS
OpenVAS
•added 2025/03/03 12:00 a.m.•10 views

Debian: Security Advisory (DLA-4072-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.00444EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/03/03 12:00 a.m.•7 views

Fedora: Security Advisory (FEDORA-2025-6f77f6c77a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.1AI score0.01202EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2025/03/03 12:00 a.m.•14 views

openSUSE Security Advisory (SUSE-SU-2025:0751-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.2AI score0.01632EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/03/03 12:00 a.m.•8 views

SUSE: Security Advisory (SUSE-SU-2025:0758-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00438EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/01 12:00 a.m.•3 views

PT-2025-45459

Уязвимость функции GrantRevokeNode::grantRevoke модуля DdlNodes.epp системы управления базами данных «Ред База Данных» связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальной информации...

4CVSS5.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2025/02/28 12:00 a.m.•17 views

openSUSE Security Advisory (SUSE-SU-2025:0723-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.2AI score0.00541EPSS
SaveExploits1References9
osv_azl
osv_azl
•added 2025/02/27 3:15 a.m.•21 views

AZL-62767 CVE-2024-58006 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pciepcsetbar In commit 4284c88fff0e "PCI: designware-ep: Allow pciepcsetbar update inbound map address" setbar was modified to support dynamically changing the backing physical...

9.6CVSS6.2AI score0.00235EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/02/27 3:06 a.m.•10 views

SUSE CVE-2022-49451

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...

5.5CVSS6.4AI score0.00299EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2025/02/27 3:04 a.m.•10 views

SUSE CVE-2022-49597

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpbasemss. While reading sysctltcpbasemss, it can be changed concurrently. Thus, we need to add READONCE to its readers...

4.7CVSS6.5AI score0.00185EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/02/27 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2025-0078)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.00618EPSS
SaveExploits1References8
OpenVAS
OpenVAS
•added 2025/02/27 12:00 a.m.•13 views

Mageia: Security Advisory (MGASA-2025-0080)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.8AI score0.07723EPSS
SaveExploits4References9
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the PCI: dwc: ep module not preventing changes to the BAR size and flags in the pciepcsetbar function...

5.5CVSS6.5AI score0.00235EPSS
SaveExploits0References5
NVD
NVD
•added 2025/02/26 1:15 p.m.•21 views

CVE-2024-12737

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.00601EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/02/26 1:15 p.m.•20 views

CVE-2024-12737

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00601EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2025/02/26 7:01 a.m.•23 views

DEBIAN-CVE-2022-49451

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...

5.5CVSS5.2AI score0.00299EPSS
SaveExploits0References1
Rows per page
Query Builder