Lucene search
+L

15283 matches found

osv_cve
osv_cve
•added 2025/09/03 6:15 a.m.•18 views

CVE-2025-21029

Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display...

3.3CVSS5.9AI score0.00111EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/03 6:05 a.m.•11 views

CVE-2025-21029

Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display...

4CVSS6AI score0.00111EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/03 6:05 a.m.•40 views

CVE-2025-21029

CVE-2025-21029 concerns Samsung Mobile/Samsung System UI prior to SMR Sep-2025 Release 1. The issue is described as improper handling of insufficient permissions in System UI, enabling local attackers to send arbitrary replies to messages from the cover display. Connected sources confirm affected...

4CVSS6AI score0.00111EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/09/03 6:05 a.m.•29 views

CVE-2025-21029

Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display...

4CVSS0.00111EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•16 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper handling of permissions...

4CVSS6.3AI score0.00111EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2019-20373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LTSP LDM through 2.18.06 allows fat-client root access because the LDMUSERNAME variable may have an empty value if the user's shell lacks support for Bourne she...

7.8CVSS7.4AI score0.00444EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2025-58160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber wa...

2.3CVSS5.6AI score0.00341EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•6 views

CVE-2025-21029: Undefined Security Weakness

Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display...

4CVSS5.9AI score0.00111EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2019-14881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed. CVE-2019-14881 Note th...

6.1CVSS6.1AI score0.01113EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•22 views

amdgpu_dm_i2c_xfer Heap Buffer Overflow DoS

Vulnerability of the amdgpudmi2cxfer function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c file – The drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable due to the reliance on the NULL pointer pointer. Exploiting thi...

5.5CVSS5.9AI score0.00236EPSS
SaveExploits0References11Affected Software1
osv_asb
osv_asb
•added 2025/09/01 12:00 a.m.•24 views

ASB-A-418773283

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00099EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/31 12:04 a.m.•15 views

CVE-2025-9584

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function updateinterfacepng of the file /usr/bin/webmgnt. The manipulation of the argument interface/displayname results in command injection. The attack can be executed remotely. The exploit has been made public and...

6.5CVSS7.1AI score0.07519EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2023-25515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of...

7.8CVSS7.5AI score0.00224EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2020-28638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - askpassword in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non- empty, causing affected users' files to be encrypted wit...

9.8CVSS8AI score0.00714EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•26 views

Mozilla Firefox Information Disclosure

The vulnerability of Mozilla Firefox browsers is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

7.8CVSS5.8AI score0.00221EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/08/28 8:15 p.m.•17 views

CVE-2025-9584

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function updateinterfacepng of the file /usr/bin/webmgnt. The manipulation of the argument interface/displayname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.8CVSS0.07519EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/08/28 8:02 p.m.•30 views

CVE-2025-9584 Comfast CF-N1 webmgnt update_interface_png command injection

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function updateinterfacepng of the file /usr/bin/webmgnt. The manipulation of the argument interface/displayname results in command injection. The attack can be executed remotely. The exploit has been made public and...

6.5CVSS0.07519EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•17 views

COMFAST CF-N1 安全漏洞

COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter interface/displayname in the file /usr/bin/webmgnt...

8.8CVSS6.8AI score0.07519EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2020-27837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a us...

6.4CVSS6.2AI score0.00228EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2025-26603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and...

4.2CVSS6.1AI score0.00237EPSS
SaveExploits0References3
Rows per page
Query Builder