Lucene search
+L

6531 matches found

CNVD
CNVD
•added 2025/10/15 12:00 a.m.•16 views

Huawei HarmonyOS sensor service buffer overflow vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS sensor service, which can be exploited by attackers to affect availability...

5.9CVSS7.2AI score0.00092EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•21 views

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2025-24050)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which can be exploited by attackers to affect availability...

5.5CVSS6.6AI score0.00109EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•23 views

Huawei HarmonyOS device management module buffer overflow vulnerability vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS device management module and can be exploited by an attacker to affect availability...

6.2CVSS7.2AI score0.00093EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•54 views

Huawei HarmonyOS Denial of Service Leakage (CNVD-2025-24064) hole

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which can be exploited by attackers to affect availability...

5.5CVSS6.6AI score0.00087EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/14 2:15 p.m.•14 views

CVE-2025-33044

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability...

7.8CVSS5.8AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/14 2:15 p.m.•19 views

CVE-2025-33044

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability...

7.8CVSS0.0015EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/14 2:00 p.m.•28 views

CVE-2025-33044

The CVE-2025-33044 entry concerns AMI AptioV BIOS with a local, memory-bounds restriction flaw. The vulnerability allows an attacker with local access to trigger memory corruption, impacting Integrity and Availability . The root cause is described as an Improper Restriction of Operations within t...

7.8CVSS6.1AI score0.0015EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/10/14 2:00 p.m.•37 views

CVE-2025-33044 exFat Memory Corruption Issue

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability...

5.8CVSS0.0015EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/14 2:00 p.m.•18 views

EUVD-2025-34215

APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and Availability...

5.8CVSS6.4AI score0.0015EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/14 1:15 a.m.•16 views

CVE-2025-42937

SAP Print Service SAPSprint performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent directory and over-write system files causing high impact on confidentiality integrity and availability of the application...

9.8CVSS0.00743EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/14 12:18 a.m.•33 views

CVE-2025-42937 Directory Traversal vulnerability in SAP Print Service

SAP Print Service SAPSprint performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent directory and over-write system files causing high impact on confidentiality integrity and availability of the application...

9.8CVSS0.00743EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/14 12:18 a.m.•21 views

EUVD-2025-34122

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...

5.4CVSS6.3AI score0.00156EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/14 12:17 a.m.•39 views

CVE-2025-42902 Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it h...

5.3CVSS0.00374EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/14 12:17 a.m.•43 views

CVE-2025-42902

The CVE-2025-42902 issue affects SAP NetWeaver AS ABAP and ABAP Platform. A memory corruption flaw allows an unauthenticated attacker to send a corrupted SAP Logon Ticket or SAP Assertion Ticket, causing a NULL pointer dereference and crashing the SAP work process. This yields impact on availabil...

5.3CVSS6AI score0.00374EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•20 views

Phoenix Contact CHARX SEC-3150 代码注入漏洞

The Phoenix Contact CHARX SEC-3150 is an AC charge controller from Phoenix Contact, Germany. The Phoenix Contact CHARX SEC-3150 suffers from a code injection vulnerability that originates from a low-privileged remote attacker who can perform command injection by changing the system configuration...

8.8CVSS8.8AI score0.00847EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•22 views

PT-2025-41924

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description APTIOV BIOS contains a flaw that allows a local attacker to perform an Improper Restriction of Operations within the Bounds of a Memory Buffer. Successful exploitation of this issue could lead...

7.8CVSS6.1AI score0.0015EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•21 views

PT-2025-41842

Name of the Vulnerable Software and Affected Versions SAP Supplier Relationship Management affected versions not specified Description SAP Supplier Relationship Management does not properly verify the type or content of uploaded files. This allows an authenticated attacker to upload arbitrary...

9CVSS6.2AI score0.00479EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•25 views

PT-2025-41837

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP and ABAP Platform affected versions not specified Description A memory corruption issue exists in SAP NetWeaver AS ABAP and ABAP Platform. An unauthenticated attacker can exploit this by sending a corrupted SAP Logon Tick...

5.3CVSS6.5AI score0.00374EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•22 views

AMI AptioV 安全漏洞

AMI AptioV is a firmware-related editor from AMI USA. A security vulnerability exists in AMI AptioV that stems from improperly restricted memory buffer manipulation, which could result in memory corruption and affect integrity and availability...

7.8CVSS7.1AI score0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•22 views

SAP NetWeaver AS ABAP Business Server和SAP ABAP Platform 代码问题漏洞

SAP NetWeaver AS ABAP Business Server and SAP ABAP Platform are both products of SAP, Germany.SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming.SAP SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced...

5.3CVSS6.7AI score0.00374EPSS
SaveExploits0References3
Rows per page
Query Builder