Lucene search
+L

19836 matches found

CNNVD
CNNVD
added 2025/08/04 12:00 a.m.12 views

Airoha Bluetooth audio SDK 安全漏洞

Airoha Bluetooth audio SDK is a software development kit from Airoha. Airoha Bluetooth audio SDK has a security vulnerability that originates from a privilege bypass that could lead to remote elevation of privilege...

8.8CVSS7.7AI score0.08069EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.14 views

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol stack allows a hacker to execute arbitrary code and cause a service failure.

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol lies in its ability to exploit memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause a service failure...

8.3CVSS6.3AI score0.0716EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.12 views

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol stack allows a hacker to circumvent existing security restrictions and create a L2CAP channel.

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and create a L2CAP channel...

3.5CVSS7.8AI score0.05362EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2025/08/04 12:00 a.m.10 views

Airoha Bluetooth audio SDK 安全漏洞

Airoha Bluetooth audio SDK is a software development kit from Airoha. Airoha Bluetooth audio SDK suffers from a security vulnerability that originates from unauthorized access to the RACE protocol and could result in remote elevation of privilege...

8.8CVSS7.6AI score0.10194EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/01 6:15 p.m.11 views

CVE-2025-8477

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must conne...

7.4CVSS6.3AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/01 6:15 p.m.14 views

CVE-2025-8477

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must conne...

7.4CVSS0.00273EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/01 6:15 p.m.7 views

CVE-2025-8472

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the...

7.4CVSS6.3AI score0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/01 6:15 p.m.9 views

CVE-2025-8475

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target...

7.4CVSS6.3AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/01 6:15 p.m.15 views

CVE-2025-8472

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the...

7.4CVSS0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/01 6:15 p.m.17 views

CVE-2025-8475

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target...

7.4CVSS0.00278EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/01 5:38 p.m.31 views

CVE-2025-8477 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must conne...

7.4CVSS0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/01 5:38 p.m.8 views

CVE-2025-8477 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must conne...

7.4CVSS7.8AI score0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/01 5:38 p.m.45 views

CVE-2025-8477

The CVE-2025-8477 entry concerns Alpine iLX-507. Affects the device’s vCard parsing, where insufficient validation of user-supplied data copies into a fixed-length stack-based buffer, causing a stack-based overflow. This can enable remote code execution in the context of root for network-adjacent...

7.4CVSS8AI score0.00273EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/01 5:38 p.m.23 views

CVE-2025-8475 Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target...

7.4CVSS0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/01 5:38 p.m.33 views

CVE-2025-8475

The CVE-2025-8475 entry concerns Alpine iLX-507 AVRCP stack-based buffer overflow that enables remote code execution. The affected device is the Alpine iLX-507 multimedia receiver, with impact as described: an attacker on the network adjacent can exploit via the AVRCP protocol to execute code wit...

7.4CVSS7.8AI score0.00278EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/01 5:38 p.m.25 views

CVE-2025-8472 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the...

7.4CVSS0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/01 2:15 p.m.11 views

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...

5.4CVSS5.8AI score0.00303EPSS
SaveExploits1References2
OSV
OSV
added 2025/08/01 12:35 p.m.5 views

SUSE-SU-2025:02588-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52923: netfilter: nftables: split async and sync catchall in two...

9.8CVSS6.7AI score0.0056EPSS
SaveExploits2References39
OSV
OSV
added 2025/08/01 12:35 p.m.8 views

SUSE-SU-2025:2588-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2023-52923: netfilter: nftables: split async and sync catchall in two...

9.8CVSS6.8AI score0.0056EPSS
SaveExploits2References39
GithubExploit
GithubExploit
added 2025/08/01 12:25 p.m.114 views

Exploit for CVE-2025-46018

CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Byp...

5.4CVSS7.7AI score0.00303EPSS
SaveExploits1
Rows per page
Query Builder