Lucene search
+L

436 matches found

OSV
OSV
added 2025/12/24 11:15 a.m.12 views

AZL-73066 CVE-2025-68345 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41hdareadacpi The acpigetfirstphysicalnode function can return NULL, in which case the getdevice function also returns NULL, but this value is then dereferenced without...

5.6AI score0.00234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.7 views

PT-2025-53103

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7 Description The Linux kernel contains a flaw in the NTFS3 file system implementation related to security initialization. Specifically, the sanity check for $SDH and $SII is insufficient, potentially...

6.5AI score0.002EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/12/18 9:39 a.m.21 views

CVE-2025-14101

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers.This issue affects PaperWork: from 5.2.0.9427 before 6.0...

7.1CVSS7AI score0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/17 6:14 p.m.7 views

CVE-2025-13326 Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store

Mattermost Desktop App versions 6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder...

3.9CVSS6.5AI score0.00111EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/17 6:14 p.m.18 views

CVE-2025-13321

CVE-2025-13321 affects Mattermost Desktop App versions prior to 6.0.0. The vulnerability stems from failure to sanitize sensitive information in application logs and to purge data on server deletion, enabling an attacker with local access to read potentially sensitive information from logs. Evide...

3.3CVSS6.4AI score0.00116EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/17 9:11 a.m.9 views

CVE-2025-14101 IDOR in GG Soft's PaperWork

Authorization Bypass Through User-Controlled Key vulnerability in GG Soft Software Services Inc. PaperWork allows Exploitation of Trusted Identifiers. This issue affects PaperWork: from 5.2.0.9427 before 6.0...

7.1CVSS5.8AI score0.00221EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.10 views

NXLog Agent 安全漏洞

NXLog Agent is a log management software from NXLog USA. A security vulnerability exists in NXLog Agent versions prior to 6.11, which originates from a file specified by the loadable OPENSSLCONF environment variable...

8.1CVSS6.6AI score0.00118EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/10 8:37 p.m.23 views

CVE-2025-67460

CVE-2025-67460 affects Zoom Rooms for Windows prior to 6.6.0. The issue is a Protection Mechanism Failure of Software Downgrade , allowing an unauthenticated user with local access to escalate privileges. The vulnerability is scoped to the Windows version; CVSS v3.1 base score is 7.8 (HIGH) with ...

7.8CVSS6.8AI score0.00157EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/10 12:00 a.m.10 views

PT-2025-50505

Name of the Vulnerable Software and Affected Versions Zoom Rooms for Windows versions prior to 6.6.0 Description A protection mechanism failure related to software downgrade in Zoom Rooms for Windows before version 6.6.0 could allow an unauthenticated user to gain elevated privileges through loca...

7.8CVSS6.6AI score0.00157EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/08 10:15 p.m.23 views

GHSA-WQ34-7F4G-953V Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)

Impact Versions of CSLA .NET prior to version 6 allow the use of WcfProxy. WcfProxy uses the NetDataContractSerializer NDCS which has known vulnerabilities that can allow remote execution of code during deserialization. NDCS itself is considered obsolete, and you should avoid using WcfProxy or...

9.2CVSS7.3AI score0.00659EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/11/22 12:33 p.m.17 views

CVE-2025-66056

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Retrieve Embedded Sensitive Data.This issue affects Uncanny Automator: from n/a through 6.10.0...

4.3CVSS6.8AI score0.00255EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/21 1:15 p.m.7 views

CVE-2025-66056

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Retrieve Embedded Sensitive Data.This issue affects Uncanny Automator: from n/a through 6.10.0...

4.3CVSS0.00255EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2025/11/14 10:03 p.m.10 views

CVE-2025-39929 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39929 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

7.5CVSS6.8AI score0.00286EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/11/14 10:03 p.m.8 views

CVE-2025-39985 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39985 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

7.8CVSS6.8AI score0.00164EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/11/14 10:03 p.m.9 views

CVE-2025-39949 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39949 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

7.8CVSS6.8AI score0.00144EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/11/14 10:03 p.m.7 views

CVE-2025-39883 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39883 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

7.1CVSS6.8AI score0.00153EPSS
SaveExploits0
EUVD
EUVD
added 2025/11/13 9:31 p.m.9 views

EUVD-2025-175362

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

6.6CVSS5.9AI score0.00099EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/13 7:38 p.m.14 views

CVE-2025-46370

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

3.3CVSS0.00108EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/13 7:30 p.m.21 views

CVE-2025-46368

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/13 2:03 p.m.10 views

CVE-2025-62876

A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4...

5.3CVSS7.1AI score0.00145EPSS
SaveExploits0References1
Rows per page
Query Builder