Lucene search
K

36957 matches found

Vulnrichment
Vulnrichment
added 2025/11/24 7:42 p.m.3 views

CVE-2025-52539

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

7.3CVSS6.6AI score0.00107EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/24 7:42 p.m.6 views

CVE-2025-52539

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

7.3CVSS0.00107EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/24 6:31 p.m.3 views

EUVD-2025-198891

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

7.5CVSS6.3AI score0.00298EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2025/11/24 6:31 p.m.5 views

NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

7.5CVSS6.9AI score0.00298EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/11/24 6:31 p.m.1 views

GHSA-F2HJ-VPP9-6VM2 NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

7.5CVSS6.7AI score0.00298EPSS
Exploits1References5
Snyk
Snyk
added 2025/11/24 4:46 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the NnssfNSSAIAvailability API when processing crafted POST requests. An attacker can disrupt service availability by sending specially crafted requests. Details Denial of Service DoS describes a family of...

8.7CVSS7AI score0.00298EPSS
Exploits1References2
NVD
NVD
added 2025/11/24 4:15 p.m.4 views

CVE-2025-60638

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

7.5CVSS0.00298EPSS
Exploits1References2
OSV
OSV
added 2025/11/24 4:15 p.m.2 views

CVE-2025-60638

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

7.5CVSS6.7AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.3 views

PT-2025-47942

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf NSSAIAvailability API...

6.8AI score0.00298EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.4 views

free5GC 安全漏洞

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC versions 4.0.0 and 4.0.1, which stems from the NnssfNSSAIAvailability API mishandling of ad-hoc POST requests, which could lead to a denial of service...

7.5CVSS6.2AI score0.00298EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/24 12:0 a.m.1 views

CVE-2025-60638

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

6.4AI score0.00298EPSS
Exploits1References2
CVE
CVE
added 2025/11/24 12:0 a.m.11 views

CVE-2025-60638

The CVE-2025-60638 issue affects Free5GC v4.0.0 and v4.0.1, where a crafted POST to the Nnssf_NSSAIAvailability API can cause a denial of service. Connected reports identify a Go/nssf panic caused by a nil pointer dereference when the expiry field is omitted in NSSAIAvailability POST requests, in...

7.5CVSS6.4AI score0.00298EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.2 views

AMD Xilinx Run Time 安全漏洞

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. A buffer overflow vulnerability exists in AMD Xilinx Run Time, which can be exploited by an attacker to cause the reading or corrupti...

7.3CVSS7.3AI score0.00107EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.4 views

AMD Xilinx Run Time 安全漏洞

AMD XOCL driver is a driver developed by AMD for OpenCL Open Computing Language, which is mainly used to support the performance optimization of AMD's GPUs in heterogeneous and parallel computing tasks. An improper input validation vulnerability exists in AMD XOCL driver, which can be exploited b...

8CVSS7AI score0.00113EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.4 views

PT-2025-47966

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...

7.1CVSS6.6AI score0.00108EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.3 views

PT-2025-47960

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability...

5.7CVSS6.7AI score0.0009EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.3 views

PT-2025-47953

A buffer overflow with Xilinx Run Time Environment may allow a local attacker to read or corrupt data from the advanced extensible interface AXI, potentially resulting in loss of confidentiality, integrity, and/or availability...

7.3CVSS7AI score0.00107EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/24 12:0 a.m.8 views

CVE-2025-60638

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the NnssfNSSAIAvailability API...

0.00298EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/24 12:0 a.m.5 views

Code-Projects Blog Site 授权问题漏洞

Blog Site is a blogging system. Blog Site suffers from an improper authorization vulnerability that originates in the file /admin.php, which can be exploited by an attacker to compromise confidentiality, integrity, and availability...

8.8CVSS6.7AI score0.00245EPSS
Exploits0References6
OSV
OSV
added 2025/11/24 12:0 a.m.2 views

OPENSUSE-SU-2025:15758-1 fontforge-20251009-2.1 on GA media

These are all security issues fixed in the fontforge-20251009-2.1 package on the GA media of openSUSE Tumbleweed...

6.5CVSS5.8AI score0.00212EPSS
Exploits0References1
Rows per page
Query Builder