Lucene search
+L

1202 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:13 p.m.8 views

CVE-2021-39774

In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-205989472...

5.5CVSS6.3AI score0.00105EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 p.m.9 views

CVE-2021-39776

In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-192614125...

7.8CVSS7.3AI score0.00111EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 p.m.7 views

CVE-2021-39779

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.5CVSS6.3AI score0.00104EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 p.m.9 views

CVE-2021-39772

In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

8.8CVSS7.4AI score0.00205EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 p.m.9 views

CVE-2021-39748

In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS6.3AI score0.00104EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:13 p.m.10 views

CVE-2021-39759

In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-180200830...

7.8CVSS7.3AI score0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:42 a.m.12 views

CVE-2016-11044

An issue was discovered on Samsung mobile devices with L5.0/5.1 and M6.0 with Fingerprint support software. The check of an application's signature can be bypassed during installation. The Samsung ID is SVE-2016-5923 June 2016...

7.8CVSS7AI score0.00093EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 a.m.14 views

CVE-2019-15501

Reflected cross site scripting XSS in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter...

6.1CVSS5.8AI score0.07416EPSS
SaveExploits5References1
OSV
OSV
added 2025/05/20 10:15 p.m.11 views

UBUNTU-CVE-2025-5001

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this...

5.5CVSS5.2AI score0.00278EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/05/02 7:12 p.m.20 views

CVE-2024-9876

: Modification of Assumed-Immutable Data MAID vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

8.5CVSS7AI score0.0024EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/30 7:15 p.m.19 views

CVE-2024-9876

: Modification of Assumed-Immutable Data MAID vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

8.5CVSS0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/30 6:31 p.m.12 views

CVE-2024-9876 Application is vulnerable to Privilege escalation

: Modification of Assumed-Immutable Data MAID vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

8.5CVSS7.2AI score0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/30 6:31 p.m.32 views

CVE-2024-9876 Application is vulnerable to Privilege escalation

: Modification of Assumed-Immutable Data MAID vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue affects ANC: through 1.1.4; ANC-L: through 1.1.4; ANC-mini: through 1.1.4...

8.5CVSS0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/30 6:31 p.m.56 views

CVE-2024-9876

CVE-2024-9876 describes a MAID (Modification of Assumed-Immutable Data) vulnerability affecting ABB ANC, ANC-L and ANC-mini up to version 1.1.4. The issue occurs in multiple ABB products (ANC through ANC-mini) with affected versions listed as 1.1.4 and earlier. Reported CVSS metrics indicate a hi...

8.5CVSS7.2AI score0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unverified ltreedepth field in ocfs2, which could lead to out-of-bounds access...

7.1CVSS6.5AI score0.00248EPSS
SaveExploits0References9
HPE Security Bulletins
HPE Security Bulletins
added 2025/04/10 12:00 a.m.13 views

HPESBNS04836 rev.1 - HPE NonStop OSM Service Connection Suite, Denial of Service vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OSM Service Connection Suite T0682 - L-series SPRs prior to T0682L02^BBV - All L-series versions of the product are affected. CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

6.8CVSS6.1AI score0.00207EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/21 11:25 a.m.22 views

CVE-2024-13481

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.5CVSS7.5AI score0.00999EPSS
SaveExploits1References1
NVD
NVD
added 2025/02/19 12:15 p.m.39 views

CVE-2024-13481

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.5CVSS0.00999EPSS
SaveExploits1References2
CVE
CVE
added 2025/02/19 11:10 a.m.56 views

CVE-2024-13481

CVE-2024-13481 – LTL Freight Quotes – R+L Carriers Edition (WordPress) Affected software: LTL Freight Quotes – R+L Carriers Edition plugin for WordPress, all versions up to and including 3.3.4. Root cause: SQL Injection via the edit_id and dropship_edit_id parameters caused by insufficient escapi...

7.5CVSS7.7AI score0.00999EPSS
SaveExploits1References2Affected Software1
Patchstack
Patchstack
added 2025/02/18 11:57 p.m.11 views

WordPress LTL Freight Quotes – R+L Carriers Edition plugin <= 3.3.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – R+L Carriers Edition versions = 3.3.4...

7.5CVSS8.1AI score0.00999EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder