Lucene search
+L

6060 matches found

CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•22 views

Siemens RUGGEDCOM input validation error vulnerability

Siemens RUGGEDCOM is a communications device from Siemens Germany. It provides fast and reliable communications for power, transportation, oil and gas, and other industries. Siemens RUGGEDCOM suffers from an input validation error vulnerability that stems from insufficient input validation during...

5.3CVSS6.4AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•17 views

Microsoft Message Queuing input validation error vulnerability

Microsoft Message Queuing is a Microsoft Corporation USA solution for implementing asynchronous and synchronous scenarios that require high performance. An input validation error vulnerability exists in Microsoft Message Queuing. An attacker could exploit the vulnerability to elevate privileges...

7.8CVSS7.2AI score0.00473EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 5:16 p.m.•24 views

CVE-2025-48594

In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

7.8CVSS0.00091EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/08 12:00 a.m.•19 views

Google Android Input Verification Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android suffers from an input validation error vulnerability that stems from improper input validation and could lead to local elevation of privilege...

7.8CVSS7.2AI score0.00109EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/12/05 10:43 p.m.•9 views

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via an overly permissive CORS configuration in the refresh endpoint. An attacker can gain unauthorized access to authentication tokens and execute arbitrary code by enticing a victim to visit a malicious webpage...

9.6CVSS8.8AI score0.92808EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2025/12/05 3:27 p.m.•23 views

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS6AI score0.00093EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/04 4:16 p.m.•37 views

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS0.00093EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/04 4:16 p.m.•30 views

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS6AI score0.00093EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/04 3:17 p.m.•37 views

CVE-2025-8074

CVE-2025-8074 describes an origin validation error in Synology BeeDrive for desktop up to version 1.4.3-13973 . The flaw allows local users to write arbitrary files containing non-sensitive information via unspecified vectors, indicating a local-privilege/unauthorized-write possibility as stated ...

5.6CVSS6AI score0.00093EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/04 3:17 p.m.•12 views

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS6AI score0.00093EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/04 3:17 p.m.•51 views

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS0.00093EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/04 3:17 p.m.•19 views

EUVD-2025-201163

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS6AI score0.00093EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/04 12:00 a.m.•20 views

PT-2025-49048

Name of the Vulnerable Software and Affected Versions Synology BeeDrive for desktop versions prior to 1.4.3-13973 Description A flaw exists in BeeDrive that allows local users to write arbitrary files containing non-sensitive information. The issue is due to an origin validation error...

5.6CVSS5.9AI score0.00093EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/12/04 12:00 a.m.•11 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a setnsh... action validation error that could cause the kernel to crash...

6.2AI score0.00239EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•11 views

CVE-2025-8074: Origin Validation Error

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS6AI score0.00093EPSS
SaveExploits0References3
Redos
Redos
•added 2025/12/03 12:00 a.m.•36 views

ROS-20251203-10

Vulnerability of parse.ParseUnverified function of golang-jwt web token library of Go programming language is related to uncontrolled resource consumption. Go programming language is related to uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely...

9.1CVSS7.2AI score0.03181EPSS
SaveExploits4
RedHat Linux
RedHat Linux
•added 2025/12/02 11:12 a.m.•20 views

kernel: i40e: fix idx validation in config queues msg

A flaw was found in the Linux kernel in the Intel i40e network driver such that in the function i40evcconfigqueuesmsg, when iterating over vf-chidx, the idx value is not properly validated against the range of active/initialized traffic classes TCs. An attacker with local privileges could supply ...

8.8CVSS7.2AI score0.00154EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/01 8:15 a.m.•19 views

CVE-2025-61617

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

7.5CVSS0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•20 views

KISS FFT input validation error vulnerability

KISS FFT is a Fourier Transform computational library by mborgerding individual developers. An input validation error vulnerability exists in versions of KISS FFT prior to 1b083165, which stems from an integer overflow in the function kissfftalloc in kissfft.c, which could result in a heap buffer...

8.6CVSS6.3AI score0.00165EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/11/25 12:00 a.m.•18 views

FortiOS FortiProxy Improper Security Check

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

4.3CVSS6.7AI score0.00427EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder