Lucene search
+L

17048 matches found

Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•8 views

PT-2025-13180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the OP-TEE supplicant, a user-space daemon in the Linux kernel, which can become hung, crashed, or killed during an OP-TEE RPC call. This can lead to a system hang-up...

5.5CVSS6.5AI score0.00217EPSS
SaveExploits0
osv_mal
osv_mal
•added 2025/02/03 5:25 p.m.•11 views

MAL-2025-1042 Malicious code in lib-automotive-call-cdm (npm)

The package communicates with a domain associated with malicious activity...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 5:25 p.m.•10 views

Malicious code in lib-automotive-call-cdm (npm)

The package communicates with a domain associated with malicious activity...

7AI score
SaveExploits0
NVD
NVD
•added 2025/02/03 5:15 p.m.•50 views

CVE-2024-45584

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace...

7.8CVSS0.00103EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 4:51 p.m.•93 views

CVE-2024-45584

CVE-2024-45584 involves memory corruption in Qualcomm chipsets caused by a sequence: a compat IOCTL call followed by a normal IOCTL call from userspace. The vulnerability arises from the call order, potentially allowing memory corruption with local access. Public descriptions consistently state t...

7.8CVSS7.5AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/02/03 4:51 p.m.•55 views

CVE-2024-45584 Untrusted Pointer Dereference in Automotive Android OS

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace...

7.8CVSS0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/03 4:51 p.m.•47 views

CVE-2024-45561 Use After Free in Windows WLAN Host

Memory corruption while handling IOCTL call from user-space to set latency level...

7.8CVSS0.00103EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 4:51 p.m.•90 views

CVE-2024-45561

CVE-2024-45561 corresponds to a memory corruption issue observed when handling an IOCTL call from user-space to set latency level on Qualcomm chipsets. Affected component/behavior: IOCTL latency-level handling in kernel/user-space interface; root cause described as memory corruption. Impact as st...

7.8CVSS7.5AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/02/03 4:51 p.m.•68 views

CVE-2024-38404 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

7.5CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 4:51 p.m.•86 views

CVE-2024-38404

CVE-2024-38404 describes a transient DoS in Qualcomm modem components triggered when a registration-accept OTA contains incorrect ciphering key data. The issue is documented across multiple feeds (NVD/NCSC/Red Hat summaries) with the same description. Connected sources indicate impact on Qualcomm...

7.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/03 4:51 p.m.•21 views

CVE-2024-38404 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

7.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 4:42 p.m.•18 views

Malicious code in @sn4k-s3c/call-home (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/02/03 12:00 a.m.•34 views

CVE-2024-36437

The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...

0.0026EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•21 views

PT-2025-2716 · Qualcomm · Snapdragon +108

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. This issue arises due to the sequence of these...

7.8CVSS7.1AI score0.00103EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•7 views

CVE-2024-36437: Improper Export of Android Application Components

The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•9 views

CVE-2024-45561: Buffer Over-read

Memory corruption while handling IOCTL call from user-space to set latency level...

7.8CVSS7.5AI score0.00103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/03 12:00 a.m.•14 views

CVE-2024-36437

The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...

5.8AI score0.0026EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2025/02/03 12:00 a.m.•15 views

TeamViewer Improper Neutralization of Argument Delimiters Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the TeamViewer service,...

7.8CVSS7.1AI score0.00563EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•21 views

com.enflick.android.TextNow security vulnerability

com.enflick.android.TextNow TextNow: Call + Text Unlimited is a mobile application from TextNow, Inc. A security vulnerability exists in com.enflick.android.TextNow version 24.17.0.2, which originates from allowing any installed application to send a crafted intent to make a phone call via a...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/31 8:15 a.m.•35 views

CVE-2024-53007

Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call...

6.4CVSS0.00126EPSS
SaveExploits0References1
Rows per page
Query Builder