Lucene search
+L

5279 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/11 12:00 a.m.14 views

The vulnerability in the kernel module drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35hwseq.c kernel of the Linux operating system is related to improper checking of power conditions and hardware states. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:00 a.m.13 views

The vulnerability of the `cifs_signal_cifsd_for_reconnect()` function in the `fs/smb/client/cifsglob.h` and `fs/smb/client/connect.c` files, which are part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifssignalcifsdforreconnect function in the fs/smb/client/cifsglob.h and fs/smb/client/connect.c files, which are part of the SMB client support in Linux kernel, is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a...

6.2CVSS6.1AI score0.00211EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:00 a.m.16 views

The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.

The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...

9CVSS5.8AI score0.15849EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:00 a.m.16 views

The vulnerability of the kmem_cachedestroy() function in the dswstate.c module of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the kmemcacheDestroy function in the dswstate.c module of Linux kernel systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00167EPSS
SaveExploits0References17Affected Software8
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2022-21265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.27 and prior. Easily...

5.5CVSS6.5AI score0.01478EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:00 a.m.20 views

The vulnerability of the `update-ldcache` function in software for creating and running NVIDIA Container Toolkit containers and NVIDIA GPU Operator resource management software allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the update-ldcache function of software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, arises from an improper definition of symbolic references before accessing files. Exploiting this vulnerabili...

8.5CVSS7.8AI score0.00835EPSS
SaveExploits0References3Affected Software5
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-35584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: ndbcluster/plugin DDL. Supported versions that are affected are 8.0.26 and prior...

4.3CVSS6.5AI score0.0101EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/08 9:32 p.m.8 views

CVE-2025-7769

Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this enables attackers to execute arbitrary...

8.7CVSS8.7AI score0.15849EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:00 a.m.22 views

The vulnerability of the websAspInit() function in D-Link DIR-513 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the websAspInit function /goform/formSetWanPPPoE in the D-Link DIR-513 router microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

9CVSS8.6AI score0.01552EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-2010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0....

4.9CVSS6.7AI score0.01413EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-28185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular user can cause an out-of-bounds write,...

7.1CVSS6.9AI score0.00302EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:00 a.m.13 views

The vulnerability of the formSetWanL2TPcallback() function in the file /goform/formSetWanL2TPtriggers of the D-Link DIR-513 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formSetWanL2TPcallback function in the file /goform/formSetWanL2TPtriggers of the D-Link DIR-513 router’s microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...

9CVSS7.8AI score0.09077EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2024-53871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-of-bounds read by passing a malformed ELF...

3.3CVSS5.9AI score0.00252EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:00 a.m.14 views

The vulnerability of the mbedtls_lms_import_public_key() function in Mbed TLS software allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlslmsimportpublickey function in Mbed TLS involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or expose sensitive information...

4.8CVSS5.7AI score0.00274EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/07 12:00 a.m.22 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

10CVSS7.9AI score0.00326EPSS
SaveExploits0References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/08/07 12:00 a.m.21 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

10CVSS7.9AI score0.00302EPSS
SaveExploits0References14Affected Software4
CVE
CVE
added 2025/08/06 8:42 p.m.61 views

CVE-2025-7769

CVE-2025-7769 affects Tigo Energy Cloud Connect Advanced (CCA). The vulnerability is a command-injection in the /cgi-bin/mobile_api endpoint triggered by DEVICE_PING due to improper handling of input, enabling remote code execution and potential unauthorized access, service disruption, and data e...

8.7CVSS8.2AI score0.15849EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2025/08/06 8:42 p.m.18 views

CVE-2025-7769 Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced

Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this enables attackers to execute arbitrary...

8.7CVSS0.15849EPSS
SaveExploits2References1
OSV
OSV
added 2025/08/06 12:31 p.m.9 views

GHSA-9356-575X-2W9M Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

5.3CVSS4.9AI score0.00395EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/06 12:15 p.m.11 views

CVE-2025-5197

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

5.3CVSS0.00395EPSS
SaveExploits1References2
Rows per page
Query Builder