Lucene search
+L

38396 matches found

ICS
ICS
added 2025/05/13 12:00 a.m.17 views

Siemens SIMATIC IPC RS-828A

SUMMARY SIMATIC IPC RS-828A is affected by an authentication bypass vulnerability in the Redfish interface of its Baseboard Management Controller BMC that could allow an attacker to gain unauthorized access and compromise confidentiality, integrity and availability of the BMC and thus the entire...

10CVSS7.6AI score0.60747EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2025/05/13 12:00 a.m.11 views

PT-2025-20822 · Sap · Sap S/4Hana Cloud Private Edition +1

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Cloud Private Edition affected versions not specified Description: The issue allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs,...

8.3CVSS6.4AI score0.00457EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2025/05/13 12:00 a.m.14 views

CVE-2025-42999

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system. Recent assessments: Assessed Attacker...

9.1CVSS6.9AI score0.13868EPSS
SaveIn wildExploits3References3
Tenable Nessus
Tenable Nessus
added 2025/05/13 12:00 a.m.10 views

Amazon Linux 2 : edk2 (ALAS-2025-2852)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2852 advisory. EDK2 contains a vulnerability in the HashPeImageByType. A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this...

4.6CVSS6AI score0.00205EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/13 12:00 a.m.4 views

OPENSUSE-SU-2025:15084-1 cpp-httplib-devel-0.20.1-1.1 on GA media

These are all security issues fixed in the cpp-httplib-devel-0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS5.8AI score0.00665EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/12 12:00 a.m.5 views

OPENSUSE-SU-2025:15081-1 libxmp-devel-4.6.3-1.1 on GA media

These are all security issues fixed in the libxmp-devel-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

5.6CVSS5.8AI score0.00295EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/12 12:00 a.m.4 views

OPENSUSE-SU-2025:15077-1 java-11-openj9-11.0.27.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.27.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.4CVSS7.1AI score0.00784EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2025/05/12 12:00 a.m.15 views

Mageia: Security Advisory (MGASA-2025-0152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS7.1AI score0.00212EPSS
SaveExploits3References4
OSV
OSV
added 2025/05/12 12:00 a.m.4 views

OPENSUSE-SU-2025:15080-1 java-21-openj9-21.0.7.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

7.4CVSS7.1AI score0.00784EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.11 views

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

4.6CVSS6.5AI score0.00186EPSS
SaveExploits0References8Affected Software4
OSV
OSV
added 2025/05/09 12:00 a.m.5 views

OPENSUSE-SU-2025:15073-1 chromedriver-136.0.7103.92-1.1 on GA media

These are all security issues fixed in the chromedriver-136.0.7103.92-1.1 package on the GA media of openSUSE Tumbleweed...

8.8CVSS5.8AI score0.00474EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.14 views

The vulnerability of the org.xwiki.platform:xwiki-platform-security-requiredrights-default component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the org.xwiki.platform:xwiki-platform-security-requiredrights-default component of the XWiki Platform relates to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...

9CVSS5.4AI score0.0034EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.8 views

PT-2025-22221

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12 Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the memblock double array function when increasing the array size and the slab is not yet available. A call to memblock...

5.5CVSS6.7AI score0.00176EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.16 views

Vulnerability of the mtk_iommu_hw_init() function in the drivers/iommu/mtk_iommu.c module – This driver for Linux’s IOMMU kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkiommuhwinit function in the drivers/iommu/mtkiommu.c module – Linux’s IOMMU kernel support driver is vulnerable due to the use of the NULL pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS5.4AI score0.0023EPSS
SaveExploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.11 views

The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially...

9CVSS8.1AI score0.00972EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.10 views

The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the fact that the operation values are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

9CVSS7.8AI score0.00972EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.11 views

The vulnerability of the ieee802154hdr_peek_addrs() function in the Linux operating system allows a hacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee802154hdrpeekaddrs function in the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of t...

8CVSS6.3AI score0.0021EPSS
SaveExploits0References11Affected Software2
Exploit DB
Exploit DB
added 2025/05/09 12:00 a.m.333 views

Apache ActiveMQ 6.1.6 - Denial of Service (DOS)

Exploit Title: Apache ActiveMQ 6.1.6 - Denial of Service DOS Date: 2025-05-9 Exploit Author: Abdualhadi khalifa https://x.com/absholi7ly/ Github: https://github.com/absholi7ly/CVE-2025-27533-Exploit-for-Apache-ActiveMQ CVE: CVE-2025-27533 import socket import struct import time import datetime...

7.5CVSS6.8AI score0.0866EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/05/08 10:12 a.m.32 views

CVE-2025-46592

Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS6.9AI score0.00105EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/08 10:11 a.m.33 views

CVE-2025-46593

Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS6.9AI score0.00106EPSS
SaveExploits0References1
Rows per page
Query Builder