Lucene search
+L

7690 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/06 12:00 a.m.13 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

9CVSS5.4AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/08/05 2:15 p.m.7 views

CVE-2025-7032

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose...

7.8CVSS5.9AI score0.00263EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/05 1:39 p.m.5 views

CVE-2025-7032

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose...

8.4CVSS5.9AI score0.00263EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2025/08/05 1:37 p.m.36 views

CVE-2025-7025

Rockwell Automation Arena Simulation is affected by CVE-2025-7025, a memory abuse/heap-based buffer overflow in Arena Simulation triggered when a user opens a malicious DOE file. The flaw can allow reading/writing past allocated memory, potentially enabling code execution or information disclosur...

8.4CVSS6.8AI score0.00261EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/08/05 1:37 p.m.13 views

CVE-2025-7025

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose...

8.4CVSS5.9AI score0.00261EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/08/05 1:37 p.m.27 views

CVE-2025-7025 Rockwell Automation Heap-based Buffer Overflow In Arena® Simulation

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose...

8.4CVSS0.00261EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:00 a.m.11 views

The vulnerability of the WeGIA web manager’s script /html/saude/profile_paciente.php, which allows a hacker to disclose confidential information

The vulnerability of the WeGIA web manager’s script /html/saude/profilepaciente.php is related to the failure to protect the SQL query structure when processing the parameter idfuncionario. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose confidential informati...

9.9CVSS5.6AI score0.0038EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:00 a.m.10 views

The vulnerability in the WeGIA web manager’s script /html/funcionario/dependente_editarEndereco.php allows a perpetrator to disclose confidential information, increase their privileges, or execute arbitrary code.

The vulnerability in the WeGIA web manager’s script /html/funcionario/dependenteeditarEndereco.php relates to the failure to protect the SQL query structure when processing the parameter idatendidofamiliares. Exploiting this vulnerability can allow an attacker to disclose confidential information...

9.9CVSS5.8AI score0.00469EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:00 a.m.26 views

The vulnerability in the WeGIA web manager’s script /html/funcionario/dependente_editarInfoPessoal.php allows a perpetrator to disclose confidential information, increase their privileges, or execute arbitrary code.

The vulnerability of the WeGIA web manager’s script /html/funcionario/dependenteeditarInfoPessoal.php is related to the lack of protection for the SQL query structure during the processing of the parameter idatendidofamiliares. Exploiting this vulnerability can allow an attacker to disclose...

9.9CVSS5.8AI score0.00469EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/08/05 12:00 a.m.8 views

Rockwell Automation Arena Simulation 安全漏洞

Rockwell Automation Arena Simulation is a discrete event simulation software from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena Simulation that stems from improper memory handling and could lead to code execution or information disclosure...

8.4CVSS7.7AI score0.00263EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:00 a.m.12 views

The vulnerability in the WeGIA web manager’s /html/funcionario/profile_dependente.php script allows a perpetrator to disclose confidential information, increase their privileges, or execute arbitrary code.

The vulnerability in the WeGIA web manager’s /html/funcionario/profiledependente.php script relates to the failure to protect the SQL query structure when processing the iddependente parameter. Exploiting this vulnerability can allow an attacker to disclose confidential information, enhance their...

9.9CVSS5.8AI score0.00469EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/08/05 12:00 a.m.9 views

Rockwell Automation Arena Simulation 安全漏洞

Rockwell Automation Arena Simulation is a discrete event simulation software from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena Simulation that stems from improper memory handling and could lead to code execution or information disclosure...

8.4CVSS7.7AI score0.00261EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:00 a.m.16 views

The vulnerability in the WeGIA web manager’s script /html/funcionario/dependente_editarDoc.php allows a perpetrator to disclose confidential information, increase their privileges, or execute arbitrary code.

The vulnerability of the /html/funcionario/dependenteeditarDoc.php web manager of WeGIA is related to the failure to protect the SQL query structure when processing the parameter idatendidofamiliares. Exploiting this vulnerability can allow an attacker to disclose confidential information, enhanc...

9.9CVSS5.8AI score0.00469EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:00 a.m.13 views

The vulnerability of the /html/atendido/Profile_Atendido.php script of the WeGIA web manager allows a perpetrator to disclose confidential information or cause service denial.

The vulnerability of the WeGIA web manager’s /html/atendido/ProfileAtendido.php script is related to the failure to protect the SQL query structure when processing the idatendido parameter. Exploiting this vulnerability can allow an attacker to disclose confidential information or cause service...

9.9CVSS5.6AI score0.0038EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.11 views

The vulnerability of the get_details() function in the POST SMTP plugin of the WordPress content management system allows a hacker to escalate their privileges and disclose sensitive information.

The vulnerability of the getdetails function in the POST SMTP Mailer plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges and disclose sensitive...

9CVSS5.8AI score0.00579EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.11 views

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

5.5CVSS5.6AI score0.00145EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.24 views

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

5.5CVSS5.7AI score0.00164EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.10 views

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

5.5CVSS5.6AI score0.00145EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.14 views

The vulnerability of the Wlan AP Driver software driver in MediaTek microprogramming chips allows attackers to enhance their privileges and disclose protected information.

The vulnerability of the Wlan AP Driver software driver from MediaTek relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...

5.5CVSS5.6AI score0.00164EPSS
SaveExploits0References2Affected Software8
CNNVD
CNNVD
added 2025/08/02 12:00 a.m.8 views

NVIDIA GPU Display Driver 安全漏洞

NVIDIA GPU Display Driver is a display driver from NVIDIA. The NVIDIA GPU Display Driver contains a security vulnerability that can be exploited by attackers to potentially cause elevation of privilege, code execution, information disclosure, denial of service, or data manipulation...

7CVSS6.6AI score0.00098EPSS
SaveExploits0References2
Rows per page
Query Builder