Lucene search
+L

17292 matches found

OSV
OSV
added 2025/03/01 10:00 a.m.13 views

CVE-2025-1786 rizinorg rizin pdb.c msf_stream_directory_free buffer overflow

A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msfstreamdirectoryfree in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The...

4.8CVSS6.2AI score
SaveExploits0References8
Cvelist
Cvelist
added 2025/03/01 10:00 a.m.25 views

CVE-2025-1786 rizinorg rizin pdb.c msf_stream_directory_free buffer overflow

A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msfstreamdirectoryfree in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The...

5.3CVSS0.003EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/02/28 2:22 a.m.19 views

CVE-2024-54173 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS0.00125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/28 12:00 a.m.16 views

PT-2025-11530 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as 'Command Injection'. This could allow a low-privileged...

7.8CVSS6.4AI score0.0083EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/02/26 12:00 a.m.16 views

PT-2025-8734 · Cisco · Cisco Apic

Name of the Vulnerable Software and Affected Versions: Cisco APIC affected versions not specified Description: A vulnerability in the system file permission handling could allow an authenticated, local attacker to overwrite critical system files, causing a DoS condition. The attacker must have...

6.2CVSS6.7AI score0.00098EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/25 2:15 p.m.9 views

CVE-2024-51539

The Dell Secure Connect Gateway SCG Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attack...

2.3CVSS5.8AI score0.0019EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/02/25 12:00 a.m.8 views

Siemens SIMATIC Devices Linux Kernel Incomplete Cleanup (CVE-2022-21125)

Incomplete cleanup of microarchitectural fill buffers on some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

5.5CVSS6.4AI score0.06451EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/02/25 12:00 a.m.38 views

Dell Client Platform BIOS Input Validation Error Vulnerability

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS suffers from an input validation error vulnerability that originates from an over-privileged attacker with local access that could lead to arbitrary code execution. No detailed vulnerability details a...

7.5CVSS7.3AI score0.00225EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/25 12:00 a.m.9 views

Zoom Workplace 安全漏洞

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.1.5, which stems from uncontrolled resource consumption by the installer and could lead to the disclosure of information via local access by privileged users...

6CVSS6AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/23 3:15 p.m.9 views

CVE-2025-1587

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

7.8CVSS6.1AI score0.00342EPSS
SaveExploits1References5
NVD
NVD
added 2025/02/23 3:15 p.m.23 views

CVE-2025-1587

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

7.8CVSS0.00342EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/02/23 3:00 p.m.11 views

CVE-2025-1587 SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

5.3CVSS5.4AI score0.00342EPSS
SaveExploits1References5
CVE
CVE
added 2025/02/23 3:00 p.m.74 views

CVE-2025-1587

CVE-2025-1587 affects SourceCodester Telecom Billing Management System 1.0, specifically the function addrecords in the Add New Record component (main.cpp). The vulnerability is a buffer overflow caused by manipulation of the argument name/phonenumber, with local access required to exploit. Explo...

7.8CVSS5.4AI score0.00342EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/02/23 3:00 p.m.43 views

CVE-2025-1587 SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

5.3CVSS0.00342EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/02/23 12:00 a.m.15 views

PT-2025-7682 · Sourcecodester · Sourcecodester Telecom Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Telecom Billing Management System version 1.0 Description: A critical issue affects some unknown processing of the file main.cpp of the component Add New Record. The manipulation of the name argument leads to buffer overflow...

7.8CVSS5.2AI score0.00342EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/02/22 12:22 p.m.11 views

CVE-2025-21105

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down t...

6.6CVSS7AI score0.00157EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/21 5:14 p.m.13 views

CVE-2024-52541

Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

8.2CVSS6.4AI score0.00162EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/21 4:45 p.m.27 views

CVE-2024-45673 IBM Security Verify Bridge information disclosure

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user...

5.5CVSS0.00134EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/20 12:15 p.m.31 views

CVE-2025-21105

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down t...

7.8CVSS0.00157EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/20 12:10 p.m.35 views

CVE-2025-21105

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down t...

6.6CVSS0.00157EPSS
SaveExploits0References1
Rows per page
Query Builder