Lucene search
+L

276 matches found

osv_azl
osv_azl
•added 2025/07/15 8:15 p.m.•15 views

AZL-65444 CVE-2025-50080 affecting package mysql for versions less than 8.0.43-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

4.9CVSS5.8AI score0.00688EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:52 a.m.•15 views

CVE-2023-22051

Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: GraalVM Compiler. Supported versions that are affected are Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit...

3.7CVSS5.6AI score0.00472EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:18 p.m.•26 views

CVE-2021-32753

EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing. A vulnerability exists in the Edinburgh, Fuji, Geneva, and Hanoi versions of the software. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user is...

8.3CVSS6.5AI score0.00799EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•5 views

CVE-2025-29662: Improper Control of Generation of Code

A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated attacker to execute system code via remote network access...

9.8CVSS6.3AI score0.00607EPSS
SaveExploits1References1
Mend
Mend
•added 2025/04/17 12:00 a.m.•6 views

CVE-2025-29662

A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated attacker to execute system code via remote network access...

9.8CVSS6.3AI score0.00607EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/15 9:15 p.m.•17 views

CVE-2025-21580

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

4.9CVSS0.00768EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/03/20 12:32 p.m.•53 views

GHSA-P2WH-W96X-W232 Ollama Denial of Service (DoS) via Null Pointer Dereference

A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial of Service DoS attack via remote network...

7.5CVSS6.8AI score0.00644EPSS
SaveExploits1References3
NVD
NVD
•added 2025/03/20 10:15 a.m.•41 views

CVE-2025-0312

A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial of Service DoS attack via remote network...

7.5CVSS0.00644EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/20 10:11 a.m.•278 views

CVE-2025-0313

CVE-2025-0313 is a duplicate of CVE-2024-12055 (rejected entry in NVD). Connected sources describe the underlying issue in Ollama <= 0.3.14: an out-of-bounds read in gguf.go that allows a malicious user to craft a GGUF model file uploaded to the public Ollama server, causing a crash andDenial ...

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•7 views

CVE-2025-0312: NULL Pointer Dereference

A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial of Service DoS attack via remote network...

7.5CVSS6.9AI score0.00644EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/07 2:36 a.m.•21 views

CVE-2025-27669

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning XSPA/DoS OVE-20230524-0013...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/05 6:15 a.m.•19 views

CVE-2025-27669

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning XSPA/DoS OVE-20230524-0013...

7.5CVSS0.00545EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/05 12:00 a.m.•12 views

CVE-2025-27669

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning XSPA/DoS OVE-20230524-0013...

5.8AI score0.00545EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/05 12:00 a.m.•9 views

PT-2025-9776

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 Description The issue allows for Remote Network Scanning and Denial of Service DoS. Recommendations For versions prior to Virtual...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/05 12:00 a.m.•8 views

CVE-2025-27669: Uncontrolled Resource Consumption

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning XSPA/DoS OVE-20230524-0013...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/05 12:00 a.m.•88 views

CVE-2025-27669

Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Remote Network Scanning (XSPA) and Denial of Service (DoS) attacks. The root cause is identified as Uncontrolled Resource Consumption (CWE-400 ). An attacker could ex...

7.5CVSS5.8AI score0.00545EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2025/03/05 12:00 a.m.•31 views

CVE-2025-27669

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning XSPA/DoS OVE-20230524-0013...

0.00545EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/28 12:00 a.m.•30 views

Vehicle Management Directory Traversal Privilege Escalation Execution Code

The vulnerability of the software for controlling and monitoring vehicles in the Howen Vehicle Service System is related to the possibility of it escaping the directory structure. Exploiting this vulnerability could allow a remote attacker to perform network activities without the user’s knowledg...

9CVSS6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/28 12:00 a.m.•26 views

Digma A172 firmware Network Activity

The vulnerability of the user.bin file in Digma A172 mobile phone software relates to deficiencies in the generation of HTTP requests. Exploiting this vulnerability allows a remote attacker to perform network activities without the user’s involvement...

5.3CVSS6.5AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/12 12:00 a.m.•22 views

Ivanti Connect Secure security vulnerabilities

Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from the inclusion of a command injection vulnerability...

9.1CVSS8.4AI score0.01641EPSS
SaveExploits0References2
Rows per page
Query Builder