Lucene search
+L

1490 matches found

Cvelist
Cvelist
•added 2025/10/14 2:00 p.m.•27 views

CVE-2025-22833 FixupArray Pointer Validation in NTFS

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution...

4.6CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/14 2:00 p.m.•44 views

CVE-2025-22833

CVE-2025-22833 (AMI APTIOV BIOS) : A vulnerability in the BIOS of AMI APTIOV firmware allows a local attacker to trigger a buffer copy that does not validate input size, potentially enabling arbitrary code execution. Affected component: APTIOV BIOS/firmware. Impact (per sources): high confidentia...

7.3CVSS6.5AI score0.00162EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/14 2:00 p.m.•12 views

CVE-2025-22833 FixupArray Pointer Validation in NTFS

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution...

4.6CVSS6.5AI score0.00162EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•20 views

AMI APTIOV 安全漏洞

AMI AptioV is a firmware-related editor from American AMI. A security vulnerability exists in AMI APTIOV that stems from a buffer copy in the BIOS that does not check the input size, which could lead to the execution of arbitrary code...

7.3CVSS7.1AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•25 views

PT-2025-41923

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description The BIOS software, APTIOV, contains a flaw where a buffer copy operation does not properly validate the size of the input data. A local attacker can exploit this to potentially execute arbitra...

7.3CVSS6.4AI score0.00162EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2025/10/14 12:00 a.m.•17 views

The vulnerability of the mnt_get_count() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mntgetcount function in the Linux operating system’s kernel is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.3CVSS6.2AI score0.00143EPSS
SaveExploits0References6Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•5 views

CVE-2025-41707: Buffer Copy without Checking Size of Input

The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality...

5.3CVSS6.1AI score0.01414EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•22 views

The vulnerability of Zoom’s video conferencing software lies in the copying of buffer data without checking the size of the input data. This allows a malicious actor to trigger a service failure.

The vulnerability of Zoom video conferencing software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS5.7AI score0.00546EPSS
SaveExploits0References3Affected Software5
EUVD
EUVD
•added 2025/10/09 6:30 p.m.•22 views

EUVD-2025-33402

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

8.2CVSS6.4AI score0.00331EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/09 4:15 p.m.•36 views

CVE-2025-52960

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

8.2CVSS5.8AI score0.00331EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/09 4:15 p.m.•48 views

CVE-2025-52960

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

8.2CVSS0.00331EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/09 3:40 p.m.•77 views

CVE-2025-52960

CVE-2025-52960 affects Juniper Networks Junos OS on SRX Series and MX Series, caused by a Buffer Copy without Checking Size in the SIP ALG (flowd/mspmand). The underlying issue occurs when memory utilization is high and specific SIP packets arrive, crashing the flowd process and causing a DoS; th...

8.2CVSS5.9AI score0.00331EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/10/09 3:18 a.m.•47 views

CVE-2025-47341

CVE-2025-47341 describes a memory corruption issue in Qualcomm chipsets triggered while processing an image encoding completion event. Affected component is tied to image encoding handling; underlying root cause is memory handling during completion processing. The CVE is tracked with high severit...

7.8CVSS6.1AI score0.00087EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/09 3:18 a.m.•8 views

CVE-2025-47341 Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event...

7.8CVSS6.1AI score0.00087EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/09 3:18 a.m.•38 views

CVE-2025-47341 Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event...

7.8CVSS0.00087EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•5 views

CVE-2025-52960: Buffer Copy without Checking Size of Input

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

8.2CVSS5.9AI score0.00331EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•17 views

The vulnerability of Autodesk Revit software for building information modeling allows a hacker to execute arbitrary code by copying buffers without checking the size of the input data.

The vulnerability of Autodesk Revit software for building information modeling involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current process using a specially created RFA...

7.8CVSS7.7AI score0.00379EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•4 views

CVE-2025-47341: Buffer Copy without Checking Size of Input

memory corruption while processing an image encoding completion event...

7.8CVSS6.1AI score0.00087EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•21 views

PT-2025-41399

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 22.4R3-S7 Juniper Networks Junos OS versions 23.2 through 23.2R2-S4 Juniper Networks Junos OS versions 23.4 through 23.4R2-S5 Juniper Networks Junos OS versions 24.2 through 24.2R2 Description A buff...

8.2CVSS6AI score0.00331EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2025/10/08 12:00 a.m.•13 views

Vulnerability of the formL2TPSetup() function in the /goform/formL2TPSetup file of the Belkin F9K1015 router microprogramming software, allowing a hacker to execute arbitrary code

The vulnerability of the formL2TPSetup function in the /goform/formL2TPSetup file of the Belkin F9K1015 router microprogramming system is related to the copying of buffers without checking the size of input data when processing the L2TPUserName parameter. Exploiting this vulnerability allows an...

9CVSS7.7AI score0.01307EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder