Lucene search
+L

3088 matches found

CVE
CVE
added 2025/09/12 6:5 a.m.30 views

CVE-2025-6769

GitLab CE/EE (versions 15.1–18.1.5, 18.2–18.2.5, 18.3–18.3.1) are affected by CVE-2025-6769. In affected builds, an authenticated user could view administrator-only maintenance notes by accessing runner details through specific interfaces. The public descriptions indicate the issue enabled exposu...

4.3CVSS6.3AI score0.00312EPSS
SaveExploits0References3Affected Software1
Packet Storm News
Packet Storm News
added 2025/09/10 12:0 a.m.24 views

Cross-Service Token: Finding Attacks in 5G Core Networks

5G marks a major departure from previous cellular architectures, by transitioning from a monolithic design of the core network to a Service-Based Architecture SBA where services are modularized as Network Functions NFs which communicate with each other via standard-defined HTTP-based APIs called...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2016-6715

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7....

5.5CVSS6.4AI score0.00345EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-0412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a...

9.3CVSS8AI score0.02535EPSS
SaveExploits6References2
VulnCheck KEV
VulnCheck KEV
added 2025/09/09 12:0 a.m.8 views

VulnCheck KEV: CVE-2025-25231

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...

7.5CVSS5.7AI score0.20348EPSS
SaveIn wildExploits1References18
Akamai Blog
Akamai Blog
added 2025/09/08 6:0 a.m.11 views

Off Your Docker: Exposed APIs Are Targeted in New Malware Strain

...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-38728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in...

9.1CVSS6.6AI score0.00314EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/09/04 11:23 p.m.18 views

SUSE CVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

5.5CVSS6.2AI score0.00314EPSS
SaveExploits0References22
OSV
OSV
added 2025/09/04 7:15 p.m.11 views

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1CVSS5.9AI score0.00092EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/04 6:34 p.m.54 views

CVE-2025-48545

CVE-2025-48545 affects Android’s AccountManagerService.isSystemUid in AccountManagerService.java, enabling a confused deputy to let an app access privileged APIs. This constitutes local privilege escalation with no additional execution privileges and no user interaction required. Public details i...

7.1CVSS6AI score0.00092EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.21 views

CVE-2025-48545

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00092EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 4:15 p.m.12 views

AZL-73845 CVE-2025-38728 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

9.1CVSS5.6AI score0.00314EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/04 4:15 p.m.17 views

AZL-66875 CVE-2025-38728 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

9.1CVSS5.6AI score0.00314EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/04 4:15 p.m.13 views

CVE-2025-38728

In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...

9.1CVSS0.00314EPSS
SaveExploits0References8
CVE
CVE
added 2025/09/04 3:33 p.m.57 views

CVE-2025-38728

Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.

9.1CVSS5.8AI score0.00314EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.18 views

PT-2025-36066

Name of the Vulnerable Software and Affected Versions: AccountManagerService affected versions not specified Description: An application may access privileged APIs due to a confused deputy condition within the isSystemUid function of AccountManagerService.java. This could result in local privileg...

5.5CVSS6.2AI score0.00092EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2025/09/03 10:6 p.m.14 views

cifs: fix underflow in parse_server_interfaces()

...

9.4CVSS7AI score0.00748EPSS
SaveExploits0
NVD
NVD
added 2025/09/03 6:15 a.m.10 views

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs...

6.8CVSS0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 6:5 a.m.20 views

CVE-2025-21031

CVE-2025-21031 concerns an improper access control in ImsService prior to Samsung SMR Sep-2025 Release 1, enabling local attackers to invoke privileged APIs. Affected: ImsService on Samsung Mobile devices. Root cause: insufficient access restrictions that permit privileged API usage from local co...

6.8CVSS5.9AI score0.00135EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/03 6:5 a.m.5 views

CVE-2025-21031

Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs...

6.8CVSS5.9AI score0.00135EPSS
SaveExploits0References1
Rows per page
Query Builder