1281 matches found
CVE-2025-20717: Stack-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00419946; Issue ID: MSV-358...
PT-2025-41879
Name of the Vulnerable Software and Affected Versions gnss driver affected versions not specified Description An out-of-bounds write issue exists in the gnss driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring an attacker to...
CVE-2025-20722: Integer Overflow or Wraparound
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798...
CVE-2025-20714: Stack-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432659; Issue ID: MSV-390...
CVE-2025-20713: Stack-based Buffer Overflow
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432661; Issue ID: MSV-390...
CVE-2025-20715: Out-of-bounds Write
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421152; Issue ID: MSV-373...
CVE-2025-20721: Out-of-bounds Write
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10089545; Issue ID: MSV-4279...
CVE-2025-20723: Out-of-bounds Write
In gnss driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920033; Issue ID: MSV-3797...
CVE-2025-61871
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...
BUFFALO NAS Navigator2 registers a Windows service with an unquoted file path
Overview NAS Navigator2 provided by BUFFALO INC. contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-61871 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
CVE-2025-61871
NAS Navigator2 for Windows (BUFFALO INC.) is affected by an unquoted service path issue (CWE-428) that allows a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. The root cause is an unquoted file path used when registering a Windows service. Docume...
CVE-2025-61871: Unquoted Search Path or Element
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...
EUVD-2020-30532
Malware in sbrugna...
EUVD-2018-2454
Malware in sbrugna...
EUVD-2019-14827
Malware in sbrugna...
EUVD-2020-13825
Malware in sbrugna...
EUVD-2020-5800
Malware in sbrugna...
EUVD-2020-5798
Malware in sbrugna...