Lucene search
+L

10013 matches found

Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•18 views

PT-2025-2751 · Samsung · Exynos 1280 +6

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 980 through 9825 Samsung Mobile Processor Exynos versions 990 Samsung Mobile Processor Exynos versions 850 Samsung Mobile Processor Exynos versions 1080 Samsung Mobile Processor Exynos versions 2100...

5.3CVSS7.1AI score0.00286EPSS
SaveExploits0References8
OSV
OSV
•added 2025/01/11 3:15 a.m.•19 views

CVE-2024-42168

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

9.4CVSS5.8AI score0.00372EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/11 2:24 a.m.•14 views

CVE-2024-42168 HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

8.9CVSS6.8AI score0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/11 2:24 a.m.•72 views

CVE-2024-42168

CVE-2024-42168 affects HCL DRYiCE/MyXalytics. The vulnerability is described as out-of-band resource load (HTTP), where an attacker can host a malicious web server and cause the application to fetch and process that content. Affected component/process is not explicitly detailed beyond the HTTP-ba...

9.4CVSS8.7AI score0.00372EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/01/11 2:24 a.m.•35 views

CVE-2024-42168 HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

8.9CVSS0.00372EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/11 12:00 a.m.•7 views

CVE-2024-42168: Externally Controlled Reference to a Resource in Another Sphere

HCL MyXalytics is affected by out-of-band resource load HTTP vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content...

9.4CVSS5.8AI score0.00372EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/11 12:00 a.m.•25 views

PT-2025-2618 · Hcl · Hcl Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL MyXalytics affected versions not specified Description: The issue concerns an out-of-band resource load HTTP vulnerability. An attacker can set up a web server with malicious content and then induce the application to retrieve and process...

9.4CVSS6.2AI score0.00372EPSS
SaveExploits0References8
NVD
NVD
•added 2025/01/06 5:15 p.m.•22 views

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS0.00469EPSS
SaveExploits1References2
OSV
OSV
•added 2025/01/06 4:41 p.m.•19 views

CVE-2023-6604 Ffmpeg: hls xbin demuxer dos amplification in ffmpeg

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.5AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/01/06 4:41 p.m.•16 views

CVE-2023-6604 Ffmpeg: hls xbin demuxer dos amplification in ffmpeg

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.9AI score0.00469EPSS
SaveExploits1References1
CVE
CVE
•added 2025/01/06 4:41 p.m.•129 views

CVE-2023-6604

CVE-2023-6604 affects FFmpeg and is described across multiple connected sources as a flaw where demuxing arbitrary data as XBIN-formatted data can cause unexpected CPU load or storage consumption, leading to degraded performance or DoS. The Debian LTS advisory (DLA-4241-1) and related Nessus entr...

5.3CVSS5.3AI score0.00469EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/01/06 4:41 p.m.•60 views

CVE-2023-6604 Ffmpeg: hls xbin demuxer dos amplification in ffmpeg

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS0.00469EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2025/01/06 4:41 p.m.•29 views

CVE-2023-6604

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6AI score0.00469EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/01/06 12:00 a.m.•47 views

RHEL 6 : bind and bind-dyndb-ldap (RHSA-2025:0039)

"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0039 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...

7.5CVSS7AI score0.99988EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/06 12:00 a.m.•5 views

CVE-2023-6604: Improper Control of Resource Identifiers

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation...

5.3CVSS6.6AI score0.00469EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•18 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg that stems from the presence of unexpected additional CPU load and storage consumption, which can lead to performance degradation or denial of...

5.3CVSS6.2AI score0.00469EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/01/01 6:30 a.m.•4 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the torch.load function within the Checkpoint.loadcheckpoint method without restrictions. Details Serialization is a process of converting an object into a sequence of bytes which can be persisted t...

9.8CVSS7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•8 views

PT-2025-36309

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where user code could potentially execute a Load Word and Swap LWS compare and swap operation at a memory address protected against read access at...

5.5CVSS6.3AI score0.0015EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•12 views

PT-2025-41369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s IOMMU subsystem for s390 architectures. Specifically, when a PCI device is unexpectedly removed surprise hotplug, attempts to attach the device to the...

7.8CVSS7.2AI score0.00144EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•13 views

PT-2026-4360

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the tpm2 load cmd function. This function allocates a temporary blob via tpm2 key decode but does not free it in failure scenarios. The issue i...

5.5CVSS5.7AI score0.00134EPSS
SaveExploits0
Rows per page
Query Builder