Lucene search
+L

28166 matches found

BDU FSTEC
BDU FSTEC
•added 2025/03/14 12:00 a.m.•18 views

Local Security Authority Privilege Escalation

The vulnerability of the Local Security Authority LSA in Windows operating systems, which is responsible for verifying identities and managing user policies, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.8CVSS8AI score0.00544EPSS
SaveExploits0References2
CBLMariner
CBLMariner
•added 2025/03/13 9:13 p.m.•16 views

CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

7.8CVSS6.5AI score0.0027EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2025/03/13 9:13 p.m.•20 views

CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

7.8CVSS6.5AI score0.00262EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/03/13 5:04 p.m.•20 views

CVE-2025-29768

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...

4.4CVSS5.7AI score0.00398EPSS
SaveExploits0
CBLMariner
CBLMariner
•added 2025/03/13 3:10 p.m.•18 views

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4. A patched version of the package is available...

7.8CVSS7.2AI score0.00385EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/13 3:44 a.m.•24 views

CVE-2024-12010

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17ABPC.5.3C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

7.2CVSS7.4AI score0.01081EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•23 views

NTFS File System Disclosure

The vulnerability of the NTFS file system in Windows operating systems is related to the disclosure of password values in the log files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these files...

4.9CVSS8AI score0.01994EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•23 views

DirectX System Failure

The vulnerability of the DirectX component in Windows operating systems is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS7.9AI score0.00605EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•23 views

Cisco IOS XR Filtering Outgoing Packets

The vulnerability of the IPv4 and IPv6 outgoing packet filtering function in the Cisco IOS XR operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

5.8CVSS6.7AI score0.00407EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/13 12:00 a.m.•27 views

PT-2025-11187

Name of the Vulnerable Software and Affected Versions: Fortinet FortiDDoS-F versions 7.0.0 through 7.02 Fortinet FortiDDoS-F versions prior to 6.6.3 Description: The software contains an improper neutralization of special elements used in an OS command, which may allow a privileged attacker to...

6.7CVSS6.5AI score0.00464EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•26 views

NTLM Hash Spoofing

The vulnerability of the NTLM Hash component of the Windows operating system is related to incorrect external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

7.8CVSS8AI score0.01341EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/03/12 4:15 p.m.•12 views

CVE-2025-20138

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

8.8CVSS8.3AI score0.00231EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•24 views

Cisco IOS XR security vulnerabilities

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. A security vulnerability exists in Cisco IOS XR that stems from incomplete file validation during boot validation, which could allow a local attacker to bypass image signature verification...

6.7CVSS6.7AI score0.0017EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•24 views

Palo Alto Networks PAN-OS security vulnerabilities

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which originates in the GlobalProtect feature, where an unauthenticated attacker sending a large number of specially...

8.2CVSS6.1AI score0.00413EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•20 views

Cisco IOS XR Access Control Vulnerability

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. An access control error vulnerability exists in Cisco IOS XR that stems from incorrect handling of IPv4 packets and could lead to bypassing configured access control lists...

5.8CVSS5.4AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•28 views

Cisco IOS XR security vulnerabilities

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. A security vulnerability exists in Cisco IOS XR version 7.9.2 that stems from incorrect handling of specific packets and could cause control plane traffic to stop working...

7.4CVSS7.3AI score0.00241EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/12 12:00 a.m.•22 views

Apple Maps Mapping Service Unauthorized Access

The vulnerability of the Apple Maps mapping service in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.00197EPSS
SaveExploits0References5Affected Software4
VulnCheck KEV
VulnCheck KEV
•added 2025/03/12 12:00 a.m.•13 views

VulnCheck KEV: CVE-2025-21590

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code...

6.7CVSS7AI score0.01749EPSS
SaveIn wildExploits0References11
Tenable Nessus
Tenable Nessus
•added 2025/03/12 12:00 a.m.•10 views

Unity Parsec Installed (Windows)

Binary data unityparsecwininstalled.nbin...

7.3AI score
SaveExploits0References2
CNVD
CNVD
•added 2025/03/12 12:00 a.m.•56 views

Apple macOS Sequoia Information Disclosure Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from an improvement in the editing of sensitive information, and can be exploited by an attacker to access sensitive user data...

5.5CVSS5.3AI score0.00245EPSS
SaveExploits0References1
Rows per page
Query Builder