Lucene search
+L

101 matches found

Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•20 views

PT-2026-36355

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds write exists in the f audio complete function. The issue occurs because the function copies req-length bytes into a 4-byte stack variable using memcpy. Since...

7.8CVSS6.2AI score0.00176EPSS
SaveExploits0
EUVD
EUVD
•added 2026/03/12 2:00 a.m.•21 views

EUVD-2025-208607

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and...

6.8CVSS5.8AI score0.00099EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/02 3:20 p.m.•17 views

EUVD-2025-206611

Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters...

7.8CVSS5.3AI score0.00103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/06 10:48 p.m.•7 views

CVE-2025-47369 Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID...

5.5CVSS5.8AI score0.00079EPSS
SaveExploits2References1
OSV
OSV
•added 2025/12/24 11:15 a.m.•14 views

UBUNTU-CVE-2022-50707

In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtiocryptoalgskcipherclosesession 'vcctrlreq' is alloced in virtiocryptoalgskcipherclosesession, and should be freed in the invalid ctrlstatus-status error handling case. Otherwise there is a...

5.7AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/12/24 10:55 a.m.•41 views

CVE-2022-50707 virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()

In the Linux kernel, the following vulnerability has been resolved: virtio-crypto: fix memory leak in virtiocryptoalgskcipherclosesession 'vcctrlreq' is alloced in virtiocryptoalgskcipherclosesession, and should be freed in the invalid ctrlstatus-status error handling case. Otherwise there is a...

0.002EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•14 views

PT-2025-52937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the virtio crypto alg skcipher close session function within the virtio-crypto module. Specifically, the vc ctrl req memory is allocated but not freed in error...

6.3AI score0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•17 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when an invalid userspace address is dereferenced during MCDM IOCTL processing...

7.8CVSS6.8AI score0.00087EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•96 views

EUVD-2021-21077

Malware in sbrugna...

5.3CVSS5.6AI score0.00623EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-2378

Malware in sbrugna...

9.3CVSS6AI score0.04934EPSS
SaveExploits0References34
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-23882

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00572EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/24 12:00 a.m.•16 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from processing a power control request with an invalid antenna or stream value, which could result in a denial of service...

7.5CVSS6.5AI score0.00223EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/06 9:31 p.m.•11 views

GHSA-VH9X-PHQ6-FX54 Duplicate Advisory: Denial of service via malicious preflight requests in github.com/rs/cors

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mh55-gqvf-xfwm. This link is maintained to preserve external references. Original Description Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include ...

6.9CVSS6.2AI score
SaveExploits0References5
NVD
NVD
•added 2025/08/06 9:15 p.m.•12 views

CVE-2025-47908

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS0.00572EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/06 9:15 p.m.•18 views

UBUNTU-CVE-2025-47908

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS6.6AI score0.00572EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/08/06 8:41 p.m.•21 views

CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

0.00572EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/06 8:41 p.m.•71 views

CVE-2025-47908

The github.com/rs/cors middleware is vulnerable to a denial of service (DoS) attack. An attacker can send malicious preflight requests containing an Access-Control-Request-Headers (ACRH) header with a large number of commas, triggering a prohibitive amount of heap allocations . This resource exha...

7.5CVSS7AI score0.00572EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/06 8:41 p.m.•13 views

CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS6.9AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/08/06 8:41 p.m.•9 views

CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

6.3AI score0.00572EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/06 12:00 a.m.•3 views

CVE-2025-47908: Undefined Security Weakness

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers ACRH header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt...

7.5CVSS5.8AI score0.00572EPSS
SaveExploits0References1
Rows per page
Query Builder