Lucene search
+L

6531 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•3 views

CVE-2025-66329: Undefined Security Weakness

Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.9AI score0.00087EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•3 views

CVE-2025-66322: Concurrent Execution using Shared Resource with Improper Synchronization

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

5.1CVSS5.8AI score0.00065EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•39 views

PT-2025-49518

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-66321 Description A multi-thread race condition exists in the camera framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information about a...

5.1CVSS6.3AI score0.00065EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/12/05 12:00 a.m.•6 views

PT-2025-54980

Уязвимость облачного программного обеспечения для создания и использования хранилища данных Nextcloud Server и Nextcloud Enterprise Server связана с ошибками в настройках безопасности. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на доступность...

4CVSS5.9AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/12/04 11:12 p.m.•15 views

expat: Large number of prefixed XML attributes on a single tag can crash libexpat

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to buffer overrun. The highest threat from this vulnerability is to availability...

9CVSS8.1AI score0.04234EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/12/04 12:00 a.m.•12 views

The vulnerability of the Screen Recording module in the HarmonyOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Screen Recording module in the HarmonyOS operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.4CVSS5.8AI score0.00076EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/12/03 9:31 p.m.•12 views

EUVD-2025-201088

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/03 7:15 p.m.•15 views

AZL-71450 CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/03 7:15 p.m.•20 views

CVE-2025-12084

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS0.00799EPSS
SaveExploits0References14
OSV
OSV
•added 2025/12/03 7:15 p.m.•32 views

UBUNTU-CVE-2025-12084

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/03 6:55 p.m.•28 views

CVE-2025-12084 Quadratic complexity in node ID cache clearing

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.7AI score
SaveExploits0References17
Vulnrichment
Vulnrichment
•added 2025/12/03 6:55 p.m.•10 views

CVE-2025-12084 Quadratic complexity in node ID cache clearing

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References14
attackerkb
attackerkb
•added 2025/12/03 6:55 p.m.•20 views

CVE-2025-12084

When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building excessively nested documents...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References15Affected Software1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•32 views

Huawei HarmonyOS/EMUI Post-Release Reuse Vulnerability

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. A post-release...

7.1CVSS6.7AI score0.00081EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•15 views

Huawei HarmonyOS video-related system service module denial of service vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the Huawei HarmonyOS video-related system service module, which can be exploited by attackers to affect...

7.3CVSS6.6AI score0.00071EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•13 views

Huawei HarmonyOS/EMUI Access to Invalid Memory Vulnerability

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. An access to...

7.1CVSS6.7AI score0.0009EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•16 views

Huawei HarmonyOS Denial of Service Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which originates from a denial of service in Office Services, and can be exploited by an attack...

5.5CVSS6.7AI score0.00071EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/03 12:00 a.m.•21 views

Huawei HarmonyOS App Lock Module Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS App Lock module, which can be exploited by attackers to affect availability...

5.5CVSS6.8AI score0.00079EPSS
SaveExploits0References1
Atlassian
Atlassian
•added 2025/12/02 11:27 p.m.•29 views

DoS (Denial of Service) com.fasterxml.jackson.core:jackson-core Dependency Vulnerability in Crowd Data Center and Server

This High severity Improper Authorization vulnerability was introduced in version 7.1.0 of Crowd Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N allows an unauthenticated attacker...

8.7CVSS6.5AI score0.00772EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/02 7:22 a.m.•14 views

CVE-2025-0003

Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability...

7.3CVSS6.5AI score0.00181EPSS
SaveExploits0References1
Rows per page
Query Builder