Lucene search
+L

7001 matches found

OSV
OSV
added 2025/05/16 3:15 p.m.6 views

UBUNTU-CVE-2025-47792

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service...

6.1CVSS5.8AI score0.00152EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/05/16 12:0 a.m.13 views

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00464EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.12 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

7.8CVSS8.5AI score0.00585EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.11 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS8.4AI score0.00366EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.17 views

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, and Microsoft 365 Apps for Enterprise, related to the possibility of using freed memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office products and Microsoft 365 Apps for Enterprise, is related to the ability to utilize freed memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted...

7.8CVSS8.2AI score0.00573EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.14 views

The vulnerability of the Microsoft Outlook client for Microsoft Office programs and 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Outlook client and Microsoft Office programs, as well as 365 Apps for Enterprise, is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00421EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.14 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.4AI score0.00498EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.11 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.0049EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2025/05/14 9:20 p.m.18 views

Android users bombarded with unskippable ads

Researchers have discovered a very versatile ad fraud network—known as Kaleidoscope—that bombards users with unskippable ads. Normally, ad fraud is not a concern for users of infected devices. They might experience some sluggish behavior on their device, but often that’s the extent of it. Ad frau...

7.5AI score
SaveExploits0
OSV
OSV
added 2025/05/14 6:15 p.m.6 views

CVE-2025-46785

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00496EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/14 6:15 p.m.20 views

CVE-2025-46786

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access...

6.1CVSS0.00251EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.7 views

CVE-2025-46786

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access...

6.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/14 6:15 p.m.24 views

CVE-2025-46785

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS0.00496EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.6 views

CVE-2025-30666

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/14 6:15 p.m.18 views

CVE-2025-30666

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS0.00472EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.6 views

CVE-2025-30665

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.6 views

CVE-2025-30668

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.8 views

CVE-2025-30667

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.4 views

CVE-2025-30664

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

8.2CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2025/05/14 6:15 p.m.2 views

CVE-2025-30663

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via local access...

7CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder