Lucene search
+L

881 matches found

CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•30 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninstall interrupt that may cause a null pointer dereference when the DPU controller is not used or was...

6.2AI score0.00208EPSS
SaveExploits0References6
NVD
NVD
•added 2025/12/18 6:15 a.m.•16 views

CVE-2025-47387

Memory Corruption when processing IOCTLs for JPEG data without verification...

7.8CVSS0.00099EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 5:29 a.m.•5 views

CVE-2025-47387 Untrusted Pointer Dereference in Camera

Memory Corruption when processing IOCTLs for JPEG data without verification...

7.8CVSS6.7AI score0.00099EPSS
SaveExploits0References1
Veracode
Veracode
•added 2025/12/17 6:49 a.m.•12 views

Improper Input Validation

sha.js is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of input data, which allows an attacker to manipulate crafted inputs to influence how data is processed...

9.1CVSS7.7AI score0.00709EPSS
SaveExploits2References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/09 12:00 a.m.•12 views

The vulnerability of the reduce method in the security scanner for analyzing Python Picklescan files allows a perpetrator to execute arbitrary code.

The vulnerability of the reduce method in the Python Picklescan security scanner lies in the use of an incomplete black list when processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5CVSS7.9AI score0.00395EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/03 12:00 a.m.•14 views

The usability of the PMU firmware microcode, generated using Xilinx SDK/Vitis/PetaLinux software tools for Zynq UltraScale+ devices, allows the intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PMU firmware microcode generated using Xilinx SDK/Vitis/PetaLinux software tools in Zynq UltraScale+ devices is related to errors in processing input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...

6.6CVSS5.8AI score0.00126EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/11/26 12:00 a.m.•13 views

The vulnerability of the software for collecting and processing data related to technological processes in ABB Ability Edgenius allows attackers to bypass authentication mechanisms through alternative paths or channels, enabling them to circumvent existing security measures.

The vulnerability of the ABB Ability Edgenius software for collecting and processing data related to technological processes involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms...

9.6CVSS5.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/25 5:59 p.m.•6 views

CVE-2025-33194

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

5.7CVSS6AI score0.0015EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/25 5:59 p.m.•14 views

EUVD-2025-199627

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

5.7CVSS5.8AI score0.0015EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/11/19 12:00 a.m.•12 views

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to redirecting users to an unreliable website, allows a hacker to redirect users to a malicious website.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, involves redirecting users to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious web page remotely...

6.4CVSS5.7AI score0.00228EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•15 views

kernel: usbnet: ipheth: use static NDP16 location in URB

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of NDP16 to be anywhere within the URB based on the wNdpIndex value in NTH16. Only the start position of NDP16 was checked, so it was possible f...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•20 views

kernel: usbnet: ipheth: fix DPE OoB read

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix DPE OoB read Fix an out-of-bounds DPE read, limit the number of processed DPEs to the amount that fits into the fixed-size NDP16 header...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References5
NVD
NVD
•added 2025/11/10 2:15 p.m.•17 views

CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

8.4CVSS0.00086EPSS
SaveExploits0References1
PyPA
PyPA
•added 2025/10/31 3:15 p.m.•18 views

PYSEC-2025-224

Kitware VTK Visualization Toolkit up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data...

7.5CVSS5.7AI score0.00401EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2025/10/31 12:00 a.m.•63 views

CVE-2025-57106

Kitware VTK (Visualization Toolkit) versions up to 9.5.0 are vulnerable to a Buffer Overflow in the vtkGLTFDocumentLoader component. The root cause is located within the BufferDataExtractionWorker template function when processing GLTF accessor data . This vulnerability affects how data is proces...

6.6AI score0.00401EPSS
SaveExploits1References2Affected Software1
Redos
Redos
•added 2025/10/28 12:00 a.m.•20 views

ROS-20251028-01

A vulnerability in the Webmin hosting control panel CGI request handler is associated with errors in processing input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code with root privileges...

9.9CVSS7.1AI score0.33467EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•12 views

ATLAS-EPIC 安全漏洞

ATLAS-EPIC is a data processing application by gsiegel14 individual developer. ATLAS-EPIC has a security vulnerability that stems from the use of hard-coded credentials...

6.5CVSS6.9AI score0.00334EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/13 5:29 a.m.•11 views

CVE-2025-58298

Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability...

7.3CVSS6.9AI score0.0009EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/11 9:30 a.m.•12 views

EUVD-2025-33830

Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability...

7.3CVSS6.4AI score0.0009EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/11 9:15 a.m.•12 views

CVE-2025-58298

Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability...

7.3CVSS0.0009EPSS
SaveExploits0References1
Rows per page
Query Builder