Lucene search
K

2863 matches found

Cvelist
Cvelist
added 2025/09/02 8:2 p.m.8 views

CVE-2025-8301 Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

Realtek RTL8811AU rtwlanu.sys N6CSetDOT11CIPHERDEFAULTKEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to...

7.8CVSS0.00022EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/02 8:2 p.m.3 views

CVE-2025-8301 Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

Realtek RTL8811AU rtwlanu.sys N6CSetDOT11CIPHERDEFAULTKEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to...

7.8CVSS7.1AI score0.00022EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/02 8:2 p.m.4 views

CVE-2025-8302 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute...

8.8CVSS7.1AI score0.00022EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.3 views

Realtek rtl81xx SDK Wi-Fi Driver 安全漏洞

Realtek rtl81xx SDK Wi-Fi Driver is a network card driver software from Realtek Semiconductor Realtek, China. A security vulnerability exists in the Realtek rtl81xx SDK Wi-Fi Driver, which stems from insufficient validation of the N6CSetDOT11CIPHERDEFAULTKEY function, which could result in elevat...

8.8CVSS8.5AI score0.00022EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.4 views

PT-2025-35610

Name of the Vulnerable Software and Affected Versions: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the...

8.8CVSS8.7AI score0.00022EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/09/02 12:0 a.m.3 views

Realtek rtl81xx SDK Wi-Fi Driver 安全漏洞

Realtek rtl81xx SDK Wi-Fi Driver is a network card driver software from Realtek Semiconductor Realtek, China. A security vulnerability exists in the Realtek rtl81xx SDK Wi-Fi Driver, which stems from insufficient validation of the N6CSetDOT11CIPHERDEFAULTKEY function, which could result in elevat...

8.8CVSS8.5AI score0.00022EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.7 views

PT-2025-35608

Name of the Vulnerable Software and Affected Versions: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the...

8.8CVSS8.7AI score0.00022EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:0 a.m.11 views

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.6AI score0.00022EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/09/02 12:0 a.m.6 views

Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.6AI score0.00022EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/01 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-9287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4. CVE-2025-9287 Note that...

9.1CVSS6.8AI score0.00142EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-20313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest...

7.5CVSS6.3AI score0.00242EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-12457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in wolfSSL before 4.5.0. It mishandles the changecipherspec CCS message processing logic for TLS 1.3. If an attacker sends...

7.5CVSS7.3AI score0.00468EPSS
Exploits0References2
NVD
NVD
added 2025/08/29 10:15 a.m.1 views

CVE-2025-7071

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations...

5.9CVSS0.00013EPSS
Exploits0References1
NVD
NVD
added 2025/08/29 10:15 a.m.1 views

CVE-2025-7383

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations...

5.9CVSS0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/29 9:19 a.m.4 views

CVE-2025-7383 Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations...

5.9CVSS0.00013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/29 9:18 a.m.1 views

CVE-2025-7071 Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations...

5.9CVSS6.3AI score0.00013EPSS
Exploits0References1
CVE
CVE
added 2025/08/29 9:18 a.m.14 views

CVE-2025-7071

The CVE concerns Oberon microsystems AG ocrypto library. A padding oracle timing side-channel in AES-CBC decryption with PKCS#7 padding exists for ocrypto versions 3.1.0 through 3.9.1 (i.e., all versions since 3.1.0 up to but not including 3.9.2). Attackers could recover plaintexts by measuring d...

5.9CVSS6.3AI score0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/29 9:18 a.m.6 views

CVE-2025-7071 Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations...

5.9CVSS0.00013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-35196

Name of the Vulnerable Software and Affected Versions: Oberon PSA Crypto library versions 1.0.0 through 1.5.0 Description: A padding oracle attack allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations. Recommendations: Update to version 1.5.1 or late...

5.9CVSS6.4AI score0.00013EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-35195

Name of the Vulnerable Software and Affected Versions: ocrypto versions 3.1.0 through 3.9.1 Description: A padding oracle attack allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS7 decrypt operations. Recommendations: Update to a version later than 3.9.1...

5.9CVSS6.4AI score0.00013EPSS
Exploits0References5
Rows per page
Query Builder