Lucene search
+L

1881 matches found

CVE
CVE
•added 2025/08/19 1:54 p.m.•48 views

CVE-2024-45062

The CVE-2024-45062 issue affects OpenPrinting ippusbxd 1.34. A stack-based buffer overflow arises in ippusbxd when parsing the media-size-supported attribute during IPP-over-USB setup, potentially allowing arbitrary code execution in a privileged ippusbxd process after a malicious USB device is c...

6.8CVSS8.2AI score0.00353EPSS
SaveExploits1References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in connected-cells (npm)

The package connected-cells was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•4 views

MAL-2025-17495 Malicious code in connected-cells (npm)

The package connected-cells was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/14 6:23 p.m.•8 views

CVE-2025-53721

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS7.6AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 6:15 p.m.•8 views

CVE-2025-53721

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/12 6:15 p.m.•9 views

CVE-2025-53721

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/12 5:10 p.m.•21 views

CVE-2025-53721 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

7CVSS0.00357EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/12 5:10 p.m.•62 views

CVE-2025-53721

Technical details are not publicly available in the provided connected documents. The CVE is described as a use-after-free in Windows Connected Devices Platform Service enabling local privilege elevation, but specifics (root cause, affected versions, exploit method, and fix) are not disclosed her...

7CVSS7.5AI score0.00357EPSS
SaveExploits0References1Affected Software10
Vulnrichment
Vulnrichment
•added 2025/08/12 5:10 p.m.•2 views

CVE-2025-53721 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

7CVSS7.2AI score0.00357EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/08/12 7:00 a.m.•9 views

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS7.7AI score0.00357EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•7 views

PT-2025-32826 · Microsoft · Windows Connected Devices Platform Service +1

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: A use after free issue exists in the Windows Connected Devices Platform Service that could allow an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.00357EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•18 views

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Connected Devices Platform Service. An attacker could exploit the vulnerability to elevate privileges. The following...

7CVSS6.3AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•3 views

CVE-2025-53721: Use After Free

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/10 4:29 p.m.•25 views

CVE-2025-8393

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...

8.5CVSS6.9AI score0.00121EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2023-32269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/afnetrom.c, there is a use- after-free because accept is also allowed for a successfull...

6.7CVSS6.6AI score0.0027EPSS
SaveExploits0References2
Mend
Mend
•added 2025/07/30 2:17 p.m.•1 views

CVE-2025-53357

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

5.4CVSS0.0018EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/30 12:00 a.m.•2 views

CVE-2025-53357: Authorization Bypass Through User-Controlled Key

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

5.4CVSS5.5AI score0.0018EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/07/23 12:00 a.m.•16 views

Leveraging Trustworthy AI for Automotive Security in Multi-Domain Operations: Towards a Responsive Human-AI Multi-Domain Task Force for Cyber Social Security

Multi-Domain Operations MDOs emphasize cross-domain defense against complex and synergistic threats, with civilian infrastructures like smart cities and Connected Autonomous Vehicles CAVs emerging as primary targets. As dual-use assets, CAVs are vulnerable to Multi-Surface Threats MSTs,...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/07/17 12:00 a.m.•10 views

An Investigation of Ear-EEG Signals for a Novel Biometric Authentication System

This work explores the feasibility of biometric authentication using EEG signals acquired through in-ear devices, commonly referred to as ear-EEG. Traditional EEG-based biometric systems, while secure, often suffer from low usability due to cumbersome scalp-based electrode setups. In this study, ...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•23 views

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Connected Devices Platform Service CDPSvc in Microsoft Windows operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS5.8AI score0.0871EPSS
SaveExploits0References2
Rows per page
Query Builder