Lucene search
K

251 matches found

CVE
CVE
added 2026/01/22 4:17 p.m.20 views

CVE-2026-23763

VB-Audio Matrix and Matrix Coconut contain a local privilege escalation in the VBMatrix VAIO virtual audio driver (vbmatrixvaio64*_win10.sys) for versions ending in 1.0.2.2 and 2.0.2.2 and earlier. The driver allocates a 128-byte non-paged pool buffer; on IOCTL 0x222060 it maps that buffer into u...

8.5CVSS6.2AI score0.00006EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002217 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...

5CVSS6.7AI score0.01966EPSS
Exploits1References24
NVD
NVD
added 2025/10/28 12:15 p.m.3 views

CVE-2025-40063

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

0.00027EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from inconsistent definitions of the allocctx and freectx operations, which could lead to problems with...

6.1AI score0.00027EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-21028

Malware in sbrugna...

7.8CVSS7.5AI score0.00004EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-24950

Malware in sbrugna...

5.5CVSS6.6AI score0.0025EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-18876

Malware in sbrugna...

7.8CVSS7.7AI score0.00098EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-6554

Malicious code in bioql PyPI...

5.5CVSS5.7AI score0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/25 7:16 a.m.8 views

CVE-2025-31700

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

8.1CVSS8.7AI score0.00861EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/07/23 6:55 a.m.5 views

CVE-2025-31701

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption e.g., crashes or remote code execution RCE. Some devices may have deployed protection mechanisms such as...

8.1CVSS7.9AI score0.00754EPSS
Exploits1References1
CVE
CVE
added 2025/07/23 6:55 a.m.74 views

CVE-2025-31701

CVE-2025-31701 affects Dahua security cameras. It is described as a buffer overflow in the RPC file upload handler that can be triggered by specially crafted packets, potentially causing DoS or remote code execution. Some devices reportedly deploy ASLR, which may reduce exploitability, but DoS re...

8.1CVSS8.6AI score0.00754EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/07/23 12:0 a.m.2 views

PT-2025-30545

Name of the Vulnerable Software and Affected Versions Dahua products affected versions not specified Description A buffer overflow vulnerability exists in Dahua products. Attackers can exploit this issue by sending specially crafted malicious packets, potentially leading to service disruption, su...

8.1CVSS6.7AI score0.00861EPSS
Exploits1References17
BDU FSTEC
BDU FSTEC
added 2025/07/01 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows attackers to circumvent ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

5.5CVSS6.1AI score0.00247EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/07/01 12:0 a.m.1 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libxslt vulnerability (USN-7600-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7600-1 advisory. It was discovered that libxslt could be made to expose sensitive information about address space layout. An attack...

6.5CVSS7.2AI score0.00126EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/06/30 12:0 a.m.2 views

Ubuntu: Security Advisory (USN-7600-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.5AI score0.00126EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 9:53 p.m.4 views

CVE-2022-25477

Vulnerability in Realtek RtsPer driver for PCIe Card Reader RtsPer.sys before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader RtsUer.sys before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR...

5.5CVSS6.9AI score0.00143EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:2 p.m.3 views

CVE-2021-1087

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin, which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization ASLR bypass. This affects vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and version 8.x...

5.5CVSS6.5AI score0.00052EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:48 p.m.3 views

CVE-2020-3679

u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

5.5CVSS9.5AI score0.0025EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 1:13 p.m.5 views

CVE-2018-9434

In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.2AI score0.00004EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/12 12:0 a.m.2 views

PT-2025-20751 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue allows an app to bypass Address Space Layout Randomization ASLR, which is a security feature designed to...

5.5CVSS6AI score0.00084EPSS
Exploits0References8
Rows per page
Query Builder