Lucene search
+L

1138 matches found

Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•3 views

PT-2025-12497

Name of the Vulnerable Software and Affected Versions aizuda snail-job version 1.4.0 Description A critical vulnerability was found in the function getRuntime of the file /snail-job/workflow/check-node-expression of the component Workflow-Task Management Module. The manipulation of the argument...

8.8CVSS0.00731EPSS
SaveExploits1References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/22 12:00 a.m.•6 views

CVE-2025-2622: Deserialization of Untrusted Data

A vulnerability was found in aizuda snail-job 1.4.0. It has been classified as critical. Affected is the function getRuntime of the file /snail-job/workflow/check-node-expression of the component Workflow-Task Management Module. The manipulation of the argument nodeExpression leads to...

8.8CVSS6.2AI score0.00731EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/03/11 12:00 a.m.•53 views

Huawei HarmonyOS process management module improper access rights vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An improper access rights vulnerability exists in the Huawei HarmonyOS process management module, which can be exploited by an attacker to compromise...

6.8CVSS6.7AI score0.00104EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2024-49969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the...

7.8CVSS7.8AI score0.00272EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/04 8:15 a.m.•27 views

CVE-2025-27521

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score0.00104EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/04 8:15 a.m.•31 views

CVE-2025-27521

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.8CVSS0.00104EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/04 7:13 a.m.•44 views

CVE-2025-27521

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.8CVSS0.00104EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/04 7:13 a.m.•87 views

CVE-2025-27521

Huawei HarmonyOS has a vulnerability in the process management module involving improper access permissions that can affect confidentiality. The CVE-2025-27521 entry is supported by a PoC exploit for Huawei HarmonyOS available at GitHub (CVE-2025-27521_PoC), which demonstrates local exploitation ...

6.8CVSS6.6AI score0.00104EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•3 views

PT-2025-9638

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue is related to improper access permission in the process management module. Successful exploitation of this issue may affect service confidentiality. Recommendations At the moment,...

6.8CVSS0.00104EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•6 views

CVE-2024-58048: Concurrent Execution using Shared Resource with Improper Synchronization

Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability...

6.7CVSS5.8AI score0.00085EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•4 views

CVE-2025-27521: Improper Handling of Insufficient Permissions or Privileges

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.8CVSS5.8AI score0.00104EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•6 views

PT-2025-9640

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A multi-thread problem vulnerability exists in the package management module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no...

6.7CVSS0.00085EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/02/05 9:44 p.m.•21 views

CVE-2022-24734

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type php with PHP code, executed on on Change Settings pages. This resul...

7.2CVSS7.4AI score0.77827EPSS
SaveExploits9References1
BDU FSTEC
BDU FSTEC
•added 2025/01/31 12:00 a.m.•13 views

The vulnerability in the implementation of the Bluetooth Mesh technology in the net/bluetooth/mgmt.c module of Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or cause service failures.

The vulnerability of the runtimers function in the net/bluetooth/mgmt.c module of Linux operating systems is related to the use of memory after it is freed during the processing of the struct hcidev object. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.5CVSS5.5AI score
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/01/08 3:03 a.m.•63 views

CVE-2024-56447

CVE-2024-56447 describes an improper permission control vulnerability in Huawei HarmonyOS' window management module. The flaw can affect service confidentiality, with CVSS data indicating impact high and local/remote considerations depending on the source. Concrete details in the connected docume...

7.8CVSS7.6AI score0.00251EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•6 views

CVE-2024-56447: Improper Privilege Management

Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.8CVSS5.9AI score0.00251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/12/29 2:30 p.m.•17 views

CVE-2024-53208

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in setpoweredsync+0x3a/0xc0...

6.8CVSS6.8AI score0.00239EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a reuse-after-release read in the setpoweredsync function in the Bluetooth:MGMT module...

7.8CVSS7.5AI score0.007EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•4 views

CVE-2024-39343: Improper Validation of Specified Quantity in Input

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300. The baseband software does not properly check the length specified by the MM Mobility Management module, which can lead to Denial of Servic...

7CVSS5.8AI score0.00373EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/05 10:21 a.m.•11 views

CVE-2024-51522

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.8AI score0.00118EPSS
SaveExploits0References1
Rows per page
Query Builder