Lucene search
+L

82995 matches found

CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•38 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporated in the United States. Qualcomm Chipsets have a buffer error vulnerability, which stems from memory corruption when processing device identifier strings that exceed the expected maximum length...

7.8CVSS5.7AI score0.00075EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•20 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a logical error in the fixInitiatingUserIfNecessary function. This vulnerability may lead to emergency calls...

4CVSS5.3AI score0.00092EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•33 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a buffer error vulnerability, which stems from memory corruption during the processing of IOCTL calls...

7.8CVSS5.8AI score0.0007EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•25 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a buffer error vulnerability, which stems from insufficient output buffer size during the execution of random number generator commands, leading to memory corruption...

6.7CVSS5.9AI score0.00079EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•26 views

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporated in the United States. Qualcomm Chipsets have a buffer error vulnerability, which stems from insufficient input validation in the diagnostic service, leading to memory corruption...

6.7CVSS5.7AI score0.00079EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•24 views

PT-2026-45353

Name of the Vulnerable Software and Affected Versions Clair affected versions not specified Description A flaw in the fetcher component allows the system to make outbound HTTP requests to attacker-supplied URIs from manifest layer descriptors because it lacks IP or scheme filtering. When Pre-Shar...

5.8CVSS5.8AI score0.00292EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•23 views

Assimp 缓冲区错误漏洞

Assimp is an open-source library developed by Assimp. It is used for importing and exporting various 3D model formats. Versions of Assimp 6.0.4 and earlier contained a buffer error vulnerability. This vulnerability stemmed from incorrect handling of the parameter aiString in the...

4.8CVSS4.9AI score0.00113EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•34 views

PT-2026-45409

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the address translation allows kernel software running inside a Guest or Host VM to post improper commands to the GPU Firmware. This can trigger...

4.3CVSS5.4AI score0.00225EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•2 views

CVE-2026-40990: Allocation of Resources Without Limits or Throttling

OOM error is possible while attempting to add infinite amount of functions to Function Registry. Affected Spring Products and Versions: Spring Cloud Function 3.2.x: versions prior to 3.2.16 Spring Cloud Function 4.1.x: versions prior to 4.1.10 Spring Cloud Function 4.2.x: versions prior to 4.2.6...

6.5CVSS5.7AI score0.00282EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•1 views

CVE-2026-0067: Undefined Security Weakness

In multiple functions of ubsanthrowingruntime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00071EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•1 views

CVE-2026-0045: Protection Mechanism Failure

In btajvrfcommconnect of btajvact.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00083EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/01 12:00 a.m.•20 views

ASB-A-380091558

In btajvrfcommconnect of btajvact.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00083EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•20 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from a boundary-checking error in the validateNode function within ResourceTypes.cpp. This error may lead to out-of-bounds reading and local...

7.8CVSS5.3AI score0.00079EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•30 views

PT-2026-45612

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple functions may cause a desync in persistence. This issue allows for local escalation of privilege without requiring addition...

7.8CVSS5.9AI score0.00096EPSS
SaveExploits0References9
OSV
OSV
•added 2026/06/01 12:00 a.m.•26 views

ASB-A-483142784

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6AI score0.00082EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•35 views

PT-2026-45569

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the Framework component of the Android operating system leads to incorrect code generation and potential tapjacking. Tapjacking is a technique where an attacker overlays a...

7.8CVSS7.2AI score0.00087EPSS
SaveExploits2References8
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•24 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a logical error in the InstallRepository.kt code. Attackers can exploit this vulnerability to gain local privileges...

7.8CVSS7.1AI score0.00083EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/01 12:00 a.m.•20 views

ASB-A-493235107

In TBD of TBD, there is a possible TBD due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4.6CVSS5.9AI score0.00115EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/01 12:00 a.m.•20 views

ASB-A-385917501

In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score0.00071EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•23 views

Nextcloud user_oidc 输入验证错误漏洞

Nextcloud useroidc is an application developed by the German company Nextcloud. In versions 6.1.0 to 8.2.2, there was a vulnerability related to input validation errors. This vulnerability stemmed from improper redirection handling, which could allow attackers to create links that redirect users ...

6.1CVSS5.3AI score0.00322EPSS
SaveExploits0References3
Rows per page
Query Builder