Lucene search
+L

2135 matches found

OSV
OSV
added 2025/11/18 5:16 p.m.6 views

CVE-2025-47761

An Exposed IOCTL with Insufficient Access Control vulnerability CWE-782 vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would requi...

7.8CVSS5.9AI score0.00155EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/18 5:1 p.m.4 views

EUVD-2025-198021

An Exposed IOCTL with Insufficient Access Control vulnerability CWE-782 in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver. Success of the attack would require bypassing t...

7.8CVSS6.4AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/17 5:15 p.m.9 views

CVE-2025-58410

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...

7.5CVSS0.0027EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/17 4:57 p.m.9 views

EUVD-2025-197806

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...

7.5CVSS6.8AI score0.0027EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/17 4:57 p.m.14 views

CVE-2025-58410 GPU DDK - Multiple calls into PhysmemGEMPrimeExport can inherit write access permission for an existing read-only dma_buf import PMR

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only. This is caused by improper handling of the memory protections for the buffer resource...

0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.7 views

Imagination Graphics DDK 安全漏洞

Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in the Imagination Graphics DDK that stems from mishandling of memory protection, which could result in gaining write access to read-only memory buffers...

7.5CVSS6.5AI score0.0027EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/11/14 12:24 a.m.11 views

SUSE CVE-2025-40153

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

3.3CVSS6.1AI score0.00193EPSS
SaveExploits0References22
NVD
NVD
added 2025/11/12 11:15 a.m.8 views

CVE-2025-40153

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

0.00193EPSS
SaveExploits0References8
OSV
OSV
added 2025/11/12 11:15 a.m.12 views

UBUNTU-CVE-2025-40153

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...

5.7AI score0.00193EPSS
SaveExploits0References40
RedhatCVE
RedhatCVE
added 2025/10/16 5:52 a.m.22 views

CVE-2025-55080

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS7AI score0.00129EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/15 6:15 a.m.6 views

CVE-2025-55080

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS0.00129EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/15 5:41 a.m.15 views

CVE-2025-55080

The vulnerability CVE-2025-55080 affects Eclipse ThreadX prior to version 6.4.3. Root cause: memory protection enabled, syscall parameter verification is insufficient, enabling an attacker to obtain an arbitrary memory read/write. Affected component: ThreadX RTOS (pre-6.4.3). Impact: arbitrary me...

7.2CVSS6.6AI score0.00129EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/15 5:41 a.m.5 views

CVE-2025-55080 Improper Parameter Check in ThreadX Syscall Implementation

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS6.6AI score0.00129EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/15 5:41 a.m.7 views

EUVD-2025-34534

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS6.5AI score0.00129EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/15 5:41 a.m.33 views

CVE-2025-55080 Improper Parameter Check in ThreadX Syscall Implementation

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS0.00129EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/15 5:41 a.m.4 views

CVE-2025-55080 Improper Parameter Check in ThreadX Syscall Implementation

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS6.1AI score0.00129EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.9 views

Eclipse ThreadX RTOS 安全漏洞

Eclipse ThreadX RTOS is an advanced real-time operating system RTOS from Eclipse ThreadX designed for deeply embedded applications. A security vulnerability exists in Eclipse ThreadX RTOS versions prior to 6.4.3, which stems from insufficient validation of a system call parameter when memory...

7.2CVSS6.7AI score0.00129EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.8 views

PT-2025-42235

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS7AI score0.00129EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/14 2:49 p.m.57 views

CVE-2025-0033

CVE-2025-0033 affects AMD SEV-SNP and describes a race condition in the Reverse Map Table (RMP) initialization that could allow a privileged hypervisor to modify RMP contents, potentially compromising SEV-SNP guest memory integrity. Affected hardware/stack: AMD EPYC processors with SEV-SNP. The r...

6CVSS6.4AI score0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 2:49 p.m.4 views

CVE-2025-0033

Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...

6CVSS6.4AI score0.00199EPSS
SaveExploits0References1
Rows per page
Query Builder