Lucene search
K

7647 matches found

CNNVD
CNNVD
added 2025/06/03 12:0 a.m.2 views

SAMSUNG Exynos 2400和SAMSUNG Exynos 1480 安全漏洞

SAMSUNG Exynos 2400 and SAMSUNG Exynos 1480 are both cell phone chip processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Exynos 2400 and SAMSUNG Exynos 1480, which stems from a lack of length checking leading to out-of-bounds writes...

8.6CVSS6.7AI score0.00301EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/03 12:0 a.m.2 views

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking, which could lead to out-of-bounds writes and local denial of service...

6.2CVSS6.3AI score0.00078EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.3 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a lack of privilege checking, which could lead to remote elevation of privilege...

9.8CVSS7AI score0.00629EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.2 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...

9.8CVSS6.1AI score0.00523EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/31 6:52 p.m.15 views

CVE-2025-5323

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

6.3CVSS6.7AI score0.00118EPSS
Exploits0References1
CNVD
CNVD
added 2025/05/30 12:0 a.m.3 views

GNU PSPP Heap Buffer Overflow Vulnerability

GNU PSPP is an application for data sampling, statistics and analysis from the American GNU community. GNU PSPP suffers from a heap buffer overflow vulnerability. The vulnerability stems from the failure of the inflateread function called indirectly by spvreadxmlmember in zip-reader.c to properly...

9.8CVSS7.5AI score0.00258EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/30 12:0 a.m.1 views

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14384)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component LS command handler. No detailed vulnerability details are provided at this time...

9.8CVSS7.4AI score0.00588EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/30 12:0 a.m.1 views

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14387)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component STATUS command handler. No detailed vulnerability details are provided at this time...

9.8CVSS7.5AI score0.00596EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/30 12:0 a.m.2 views

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14386)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component VERBOSE command handler. No detailed vulnerability details are provided at this time...

9.8CVSS7.5AI score0.00596EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/30 12:0 a.m.1 views

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14385)

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component TYPE command handler. No detailed vulnerability details are provided at this time...

9.8CVSS7.5AI score0.00596EPSS
Exploits1References1
NVD
NVD
added 2025/05/29 6:15 p.m.12 views

CVE-2025-5323

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

6.3CVSS0.00118EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/05/29 6:0 p.m.22 views

CVE-2025-5323 fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

6.3CVSS0.00118EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/05/29 6:0 p.m.10 views

CVE-2025-5323 fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

6.3CVSS4.2AI score0.00118EPSS
Exploits0References5
OSV
OSV
added 2025/05/29 3:17 p.m.5 views

CVE-2025-48471 FreeScout Vulnerable to Arbitrary File Upload

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insufficient checking of files uploaded to the application. This allows files to be uploaded with the phtml and phar extensions, which can lead to remote code executi...

7CVSS8AI score0.00958EPSS
Exploits1References4
Veracode
Veracode
added 2025/05/28 9:27 a.m.10 views

Out-of-Bounds Read

libassimp.so is vulnerable to Out-of-bounds Read. The vulnerability is due to improper input validation due to insufficient bounds checking in the LWOImporter::CountVertsAndFacesLWO2 function, which may allow local attackers to read unintended memory content...

7.8CVSS6.4AI score0.00221EPSS
Exploits1References8Affected Software1
Veracode
Veracode
added 2025/05/28 5:10 a.m.9 views

Out-of-Bounds-Read

libassimp.so is vulnerable to out-of-bounds read. The vulnerability is due to insufficient bounds checking in the SkipSpaces function, which allows memory to be read beyond the valid buffer limits during local access...

7.8CVSS6.5AI score0.00221EPSS
Exploits1References7Affected Software1
CNNVD
CNNVD
added 2025/05/28 12:0 a.m.1 views

FreeFloat FTP Server 安全漏洞

FreeFloat FTP Server is an FTP service from FreeFloat. FreeFloat FTP Server suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking in the component LANG command handler. No detailed vulnerability details are provided at this time...

9.8CVSS7.3AI score0.00596EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.4 views

The vulnerability in the software for automatic checking of updates for the Microsoft Edge Update browser lies in the improper handling of symbolic links before accessing the file. This allows a malicious actor to elevate their privileges to a system level.

The vulnerability in the software for automatic checking of updates for the Microsoft Edge Update browser is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability could allow a malicious individual to elevate their privileges to a system lev...

8.8CVSS5.4AI score0.00494EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2025/05/27 3:54 a.m.11 views

Out-of-bounds Read

libassimp.so is vulnerable to Out-of-Bounds Read. The vulnerability is due to improper input validation due to insufficient bounds checking in the LWOImporter::GetS0 function when handling the out argument, which can result in reading beyond allocated memory...

5.5CVSS6.6AI score0.00208EPSS
Exploits1References7Affected Software1
Redos
Redos
added 2025/05/26 12:0 a.m.9 views

ROS-20250526-09

Vulnerability of moodle virtual learning environment is related to flaws in permission checking and user capabilities of the user. Exploitation of the vulnerability could allow an attacker acting remotely to access confidential information A vulnerability in the Multi-Factor Authentication...

5.3CVSS7.6AI score0.0029EPSS
Exploits0
Rows per page
Query Builder