Lucene search
K

5832 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the set_add_routing function in the internet.cgi script of the Wavlink AC3000 (WL-WN533A8) router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the setaddrouting function in the internet.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.1CVSS8.2AI score0.05212EPSS
Exploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-46934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warning in i2ctransfer, ex...

3.3CVSS6.1AI score0.00233EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2020-16030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HT...

6.1CVSS7.6AI score0.00652EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-10895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data...

7.5CVSS6.7AI score0.05803EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-16015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS8.1AI score0.0099EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-16035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process ...

8.8CVSS8.1AI score0.00996EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-16032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a...

4.3CVSS6.7AI score0.00656EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/03 4:25 p.m.5 views

CVE-2025-0285 CVE-2025-0285

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits...

7.9AI score0.0031EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/03 4:25 p.m.5 views

CVE-2025-0286 CVE-2025-0286

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine...

8.5AI score0.00359EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/03 12:0 a.m.2 views

The vulnerability of the MongoDB database management system, related to improper validation of consistency in input data, allows a attacker to cause service failures.

The vulnerability of the MongoDB database management system is related to improper validation of consistency in input data during index processing with the PrepareUnique parameter. Exploiting this vulnerability allows an attacker to cause service failures remotely...

6.8CVSS6.8AI score0.0057EPSS
Exploits0References5Affected Software2
RedhatCVE
RedhatCVE
added 2025/02/28 4:18 a.m.6 views

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

8.4CVSS7.2AI score0.00266EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/02/28 12:0 a.m.2 views

The vulnerability of UEFI microprogramming systems in Intel processors allows attackers to enhance their privileges.

The vulnerability of UEFI microprogramming systems of Intel processors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.2CVSS7.4AI score0.00259EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/27 12:0 a.m.2 views

The vulnerability of UEFI microprogramming systems of Intel processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel UEFI microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.00237EPSS
Exploits0References9Affected Software4
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly validating data of type TEAMOPTIONTYPESTRING...

5.5CVSS6.5AI score0.00224EPSS
Exploits0References7
NVD
NVD
added 2025/02/26 8:14 a.m.7 views

CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

8.4CVSS0.00266EPSS
Exploits0References1
CVE
CVE
added 2025/02/26 1:44 a.m.61 views

CVE-2025-22881

CVE-2025-22881 affects Delta Electronics CNCSoft-G2, a human-machine interface (HMI) software. The vulnerability is a heap-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer. An attacker can lure a target to vis...

8.4CVSS6.6AI score0.00266EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/24 12:0 a.m.2 views

The vulnerability of the iio component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iio component in the Linux operating system’s kernel is related to improper validation of input data in the afe4403readraw function. Exploiting this vulnerability can allow an attacker to cause service failures...

7.1CVSS6.5AI score0.00244EPSS
Exploits0References23Affected Software3
Positive Technologies
Positive Technologies
added 2025/02/19 12:0 a.m.3 views

PT-2025-6950 · Unknown · Age Verification For Your Checkout Page

Name of the Vulnerable Software and Affected Versions: Age Verification for your checkout page Verify your customer's identity version 1.20.0 Description: The web application dynamically generates web content without validating the source of potentially untrusted data. This issue is located in th...

4.3CVSS9.2AI score0.00262EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2025/02/18 12:0 a.m.16 views

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

8.8CVSS5.9AI score0.00793EPSS
Exploits0References22Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/02/18 12:0 a.m.5 views

The vulnerability of the Linux operating system’s kernel components, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel components is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

6.2CVSS6.4AI score0.00243EPSS
Exploits0References18Affected Software4
Rows per page
Query Builder