154 matches found
EUVD-2025-199965
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...
CVE-2025-61762
Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft component: Payables. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables...
EUVD-2020-29912
Malware in sbrugna...
EUVD-2021-15755
Malware in sbrugna...
EUVD-2024-19266
Malicious code in bioql PyPI...
EUVD-2024-2915
Malicious code in bioql PyPI...
CVE-2025-27262
Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges...
CVE-2025-27262
CVE-2025-27262 summary (normal mode) : Ericsson Indoor Connect 8855 is affected by a command injection vulnerability in its handling of OS commands, enabling an attacker with local access to achieve privilege escalation. The CVSS basis metrics indicate a high-severity, local, low-exploitability-c...
PT-2025-39394
Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a command injection issue that, if exploited, could result in a loss of data integrity and confidentiality. This could lead to the unauthorized...
mysql: Optimizer unspecified vulnerability (CPU Apr 2025)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...
The vulnerability of the ksmbd_iovpin_rsp() function in the ksmbd component of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ksmbdiovpinrsp function in the ksmbd component of the Linux operating system’s kernel relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to memory usage after its release, allowing attackers to execute arbitrary code or cause service interruptions.
The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PRT file...
The vulnerability of the dpll component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.
The vulnerability of the dpll component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
Vulnerability of the ath9k_htc_txstatus() function in the drivers/net/wireless/ath/ath9k/htc_drv_txrx.c file – This driver provides support for Atheros/Qualcomm wireless adapter devices in the Linux operating system. It can be exploited by attackers to cause service failures.
Vulnerability of the ath9khtctxstatus function in the drivers/net/wireless/ath/ath9k/htcdrvtxrx.c file – The Atheros/Qualcomm wireless adapter support driver for Linux operating systems has a vulnerability related to unvalidated array indexing. Exploiting this vulnerability could allow an attacke...
SUSE CVE-2025-5318
A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in...
CVE-2020-9250
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...
The vulnerability of the SDK components of AirPlay and CarPlay Communication Plug-in, which allows a perpetrator to cause a service failure.
The vulnerability of the SDK components of AirPlay and CarPlay Communication Plug-in relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2023-33199
Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the intoto/v0.0.2 type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error...
The vulnerability of the pinctrl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the pinctrl component in the Linux operating system’s kernel is related to the execution of a loop with an unavailable exit condition in the ocelotirqhandler function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the bfd_mach_o_get_synthetic_symtab() function in the bfd/mach-o.c component of the GNU Binutils development environment allows a attacker to cause a service failure.
The vulnerability of the bfdmachogetsyntheticsymtab function in the bfd/mach-o.c component of the GNU Binutils development environment is related to errors during variable initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...