23593 matches found
CVE-2025-49589
CVE-2025-49589 (PCSX2) affects the PCSX2 PS2 emulator. A stack-based buffer overflow exists in the Kprintf_HLE function in versions up to 2.3.414. Opening a disc image that logs a specially crafted message may allow an attacker to execute arbitrary code if IOP Console Logging is enabled (describe...
CVE-2025-36539
AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated user to shut down certain necessary PI Data Archive subsystems, resulting in a denial of service...
CVE-2025-4418
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...
CVE-2025-5485 SinoTrack GPS Receiver Weak Authentication
User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or through enumerating random digit sequenc...
CVE-2025-5484 SinoTrack GPS Receiver Weak Authentication
A username and password are required to authenticate to the central SinoTrack device management interface. The username for all devices is an identifier printed on the receiver. The default password is well-known and common to all devices. Modification of the default password is not enforced duri...
CVE-2025-43200
creationtimestamp| type| source ---|---|--- 2025-06-12 18:45:37+00:00| seen| https://infosec.exchange/users/decio/statuses/114671873989460196 2025-06-13 05:03:00+00:00| seen| https://thehackernews.com/2025/06/apple-zero-click-flaw-in-messages.html 2025-06-13 07:42:35+00:00| seen|...
CVE-2025-0051
Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service...
CVE-2025-47171
Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally...
CVE-2025-24068
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-47957
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-33061
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
CVE-2025-47166
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-32725
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2025-47968
Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-47977
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-32718
Integer overflow or wraparound in Windows SMB allows an authorized attacker to elevate privileges locally...
CVE-2025-33068
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...
CVE-2025-32712
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...