Lucene search
+L

176 matches found

RedhatCVE
RedhatCVE
added 2025/04/02 5:10 a.m.15 views

CVE-2025-21906

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: clean up ROC on failure If the firmware fails to start the session protection, then we do call iwlmvmrocfinished here, but that won't do anything at all because IWLMVMSTATUSROCP2PRUNNING was never set. Set...

5.5CVSS7.2AI score0.00218EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.20 views

The vulnerability of the idx_to_offset() function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the idxtooffset function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

5.5CVSS5.4AI score0.00222EPSS
SaveExploits0References15Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.12 views

The vulnerability of the Block permissions module in the Drupal CMS system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Block permissions module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.00338EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.20 views

The vulnerability of the trie_get_next_key() function in the kernel/bpf/lpm_trie.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the triegetnextkey function in the kernel/bpf/lpmtrie.c module of the Linux operating system is related to memory allocation beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

7.8CVSS6.9AI score0.0027EPSS
SaveExploits0References27Affected Software7
Positive Technologies
Positive Technologies
added 2024/12/26 12:00 a.m.9 views

PT-2024-41136 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, нарушить целостность и доступность защищаемой информации...

8.5CVSS7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:00 a.m.11 views

The vulnerability of the tcp_metrics_nl_policy structure in the Linux operating system’s kernel-based IPv4 protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpmetricsnlpolicy structure in the net/ipv4/tcpmetrics.c file of the Linux operating system’s IPv4 protocol implementation is related to the lack of checks on the length of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

4.4CVSS6.4AI score0.00258EPSS
SaveExploits0References53Affected Software13
BDU FSTEC
BDU FSTEC
added 2024/07/19 12:00 a.m.10 views

The vulnerability of the Outside In Core component within Oracle’s software development kit (SDK) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Outside In Core component in Oracle’s software development toolset SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

5.3CVSS6.7AI score0.0032EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/17 12:00 a.m.14 views

The vulnerability of the irdmaGenerateFlush_completions() function in the InfiniBand driver for Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irdmaGenerateFlushcompletions function in the drivers/infiniband/hw/irdma/utils.c file of the Linux kernel’s InfiniBand irdma driver is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality,...

7.8CVSS6.2AI score0.00612EPSS
SaveExploits0References8Affected Software3
CNNVD
CNNVD
added 2023/11/06 12:00 a.m.9 views

WordPress Plugin Slimstat Analytics SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Slimstat...

9.8CVSS7.7AI score0.00517EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.10 views

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

10CVSS7.9AI score0.01037EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:00 a.m.13 views

The vulnerability of the Java Runtime Environment software platform arises from operations that go beyond buffer boundaries in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Java Runtime Environment software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity, accessibility, and confidentiality of information...

7.5CVSS8.3AI score0.96319EPSS
SaveExploits5References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.11 views

The vulnerability in the qemu-bridge-helper.c function of the QEMU hardware emulator stems from security vulnerabilities, which allow attackers to gain unauthorized access to information, cause service failures, or compromise the availability of information.

The vulnerability in the qemu-bridge-helper.c function of the QEMU hardware emulation software is related to security vulnerabilities. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information, cause service failures, or affect the availability of information...

7.8CVSS6.6AI score0.00524EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:00 a.m.15 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management after it is released. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

7.8CVSS7.2AI score0.03919EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/09 12:00 a.m.12 views

The vulnerability of the WSGI Micro-Framework configuration, Bottle, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the WSGI Micro-Framework “Bottle” is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9CVSS6.7AI score0.01765EPSS
SaveExploits1References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/08/08 12:00 a.m.19 views

The vulnerability of UEFI (BIOS) software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of UEFI BIOS software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

7.5CVSS5.6AI score
SaveExploits0References2Affected Software37
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:00 a.m.11 views

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

9.3CVSS7.7AI score0.0381EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:00 a.m.16 views

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

9.3CVSS7.7AI score0.04387EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:00 a.m.12 views

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

9.3CVSS7.7AI score0.04387EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:00 a.m.13 views

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

9.3CVSS7.7AI score0.0381EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:00 a.m.14 views

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

9.3CVSS7.6AI score0.04738EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder