Lucene search
+L

9121 matches found

Vulnrichment
Vulnrichment
added 2025/05/10 10:00 a.m.8 views

CVE-2025-4498 code-projects Simple Bus Reservation System Install Bus install stack-based overflow

A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component Install Bus. The manipulation of the argument bus leads to stack-based buffer overflow. It is possible to launch the attack on the local...

5.3CVSS5.5AI score0.00339EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2025/05/10 3:05 a.m.7 views

SUSE CVE-2022-49900

In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix adapter not be removed in piix4remove In piix4probe, the piix4 adapter will be registered in: piix4probe piix4addadapterssb800 / piix4addadapter i2caddadapter Based on the probed device type, piix4addadapterssb800...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/05/10 12:00 a.m.7 views

Code-Projects Simple Bus Reservation System 安全漏洞

Code-Projects Simple Bus Reservation System is a Code-Projects open source simple bus reservation system. A security vulnerability exists in Code-Projects Simple Bus Reservation System version 1.0, which originates from a stack-based buffer overflow due to the parameter bus operation of function...

7.8CVSS5.8AI score0.00339EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/05/10 12:00 a.m.12 views

PT-2025-20620 · Unknown · Simple Bus Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Bus Reservation System version 1.0 Description: A critical vulnerability has been found in the function a::install of the component Install Bus. The manipulation of the argument bus leads to a stack-based buffer overflow...

7.8CVSS5.2AI score0.00339EPSS
SaveExploits1References11
OSV
OSV
added 2025/05/09 7:16 a.m.13 views

AZL-62753 CVE-2025-37882 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...

7.8CVSS6.5AI score0.00279EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/09 7:16 a.m.5 views

DEBIAN-CVE-2025-37882

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...

7.8CVSS5.8AI score0.00279EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/05/09 4:54 a.m.6 views

SUSE CVE-2022-49924

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: Fix potential memory leak in fdpncisend fdpncisend will call fdpncii2cwrite that will not free skb in the function. As a result, when fdpncii2cwrite finished, the skb will memleak. fdpncisend should free skb after...

5.5CVSS6.5AI score0.00176EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2025/05/09 3:23 a.m.12 views

SUSE CVE-2025-37813

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before preparetransfer and preparering, so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of time...

5.5CVSS6.5AI score0.00187EPSS
SaveExploits0References20
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.12 views

The vulnerability of the IBM Business Automation Workflow software and the IBM Business Automation Workflow Enterprise Service Bus software platform lies in the lack of security measures for website structures. This allows attackers to execute cross-site scripting attacks.

The vulnerability of the IBM Business Automation Workflow software and the IBM Business Automation Workflow Enterprise Service Bus software platform relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to...

5.5CVSS5.3AI score0.00277EPSS
SaveExploits0References2Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/08 2:28 p.m.26 views

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to NULL Pointer Dereference and Out-of-bounds Write due to IBM Java ( CVE-2025-1470 & CVE-2025-1471)

Summary IBM Integration Bus for z/OS runtime is vulnerable to NULL Pointer Dereference and Out-of-bounds Write due to IBM Java. Vulnerability Details CVEID:CVE-2025-1470 DESCRIPTION: In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities...

7.8CVSS6.6AI score0.00179EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2025/05/08 11:40 a.m.14 views

SUSE CVE-2025-37800

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...

5.5CVSS7.7AI score0.00194EPSS
SaveExploits0References17
OSV
OSV
added 2025/05/08 7:15 a.m.9 views

AZL-63788 CVE-2025-37800 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...

7.1CVSS6.6AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/08 7:15 a.m.6 views

DEBIAN-CVE-2025-37800

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...

5.5CVSS5.5AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/08 7:15 a.m.10 views

UBUNTU-CVE-2025-37813

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron workaround This check is performed before preparetransfer and preparering, so enqueue can already point at the final link TRB of a segment. And indeed it will, some 0.4% of time...

7.8CVSS6.2AI score0.00187EPSS
SaveExploits0References22
OSV
OSV
added 2025/05/08 7:15 a.m.5 views

UBUNTU-CVE-2025-37819

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode With ACPI in place, gicv2mgetfwnode is registered with the pci subsystem as pcimsigetfwnodecb, which may get invoked at runtime during a PCI host bridge probe. But, the...

7.8CVSS6.2AI score0.00197EPSS
SaveExploits0References32
OSV
OSV
added 2025/05/08 7:15 a.m.8 views

UBUNTU-CVE-2025-37809

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typecpartnerunlinkdevice can lead to a NULL pointer dereference. This patch adds a mutex to protect USB device pointers and prevent this issue. The same mutex protect...

5.5CVSS6.2AI score0.0019EPSS
SaveExploits0References22
OSV
OSV
added 2025/05/08 7:15 a.m.8 views

UBUNTU-CVE-2025-37800

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in devuevent If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev-driver from a valid pointer to NU...

7.1CVSS6.2AI score0.00194EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2025/05/08 12:00 a.m.10 views

PT-2025-20338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a NULL pointer access in the Linux kernel's USB Type-C class driver. Concurrent calls to the typec partner unlink device function can lead to a NULL pointer dereferenc...

5.5CVSS6.6AI score0.0019EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/05/07 2:19 a.m.14 views

SUSE CVE-2022-49828

In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: don't delete error page from pagecache This change is very similar to the change that was made for shmem 1, and it solves the same problem but for HugeTLBFS instead. Currently, when poison is found in a HugeTLB page, t...

5.5CVSS6.5AI score0.00187EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/06 8:15 a.m.10 views

CVE-2025-46592

Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.8AI score0.00105EPSS
SaveExploits0References1
Rows per page
Query Builder