Lucene search
+L

124 matches found

Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•23 views

PT-2026-34160

Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

7.8CVSS5.7AI score0.00161EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/21 12:00 a.m.•13 views

The vulnerabilities of the Microsoft .NET software platform, Microsoft .NET Framework, and the Visual Studio source code editor allow attackers to induce a service failure.

The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the source code editor Visual Studio is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.1AI score0.02444EPSS
SaveExploits0References6Affected Software10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/21 12:00 a.m.•2 views

CVE-2026-35243: Improper Access Control

Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

7.8CVSS5.7AI score0.00161EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/12 5:23 p.m.•35 views

CVE-2025-68656

CVE-2025-68656 affects the ESP-IDF USB Host HID Driver. Before 1.1.0, usb_class_request_get_descriptor() frees and reallocates hid_device->ctrl_xfer while continuing to use a stale local pointer, causing an immediate use-after-free when processing attacker-controlled Report Descriptor lengths....

6.8CVSS6.1AI score0.00213EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/28 12:42 a.m.•23 views

CVE-2025-68474

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

6.1CVSS7.5AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/26 11:57 p.m.•13 views

CVE-2025-68474 ESF-IDF Has Out-of-Bounds Write in ESP32 Bluetooth AVRCP Vendor Command Handling

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the avrcvendormsg function of the ESP-IDF BlueDroid AVRCP stack, the allocated buffer size was validated using AVRCMINCMDLEN 20 bytes. However, the actual fixed...

6.1CVSS6AI score0.00316EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•16 views

ESP-IDF 缓冲区错误漏洞

ESP-IDF is an Espressif open source development framework for Espressif SoCs supported on Windows, Linux and macOS. A buffer error vulnerability exists in ESP-IDF versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and prior versions, which stems from insufficient validation of the buffer length when AVR...

9.1CVSS6.8AI score0.00634EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/11/17 5:21 p.m.•7 views

CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

6.9CVSS5.7AI score0.00398EPSS
SaveExploits0References7
OSV
OSV
•added 2025/11/12 4:29 a.m.•8 views

MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2025/10/15 12:00 a.m.•12 views

Huawei HarmonyOS development framework module buffer overflow vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS development framework module, which can be exploited by attackers to affect availability...

5.9CVSS7.2AI score0.00092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/13 5:29 a.m.•15 views

CVE-2025-58295

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.9CVSS7.2AI score0.00092EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/11 9:30 a.m.•12 views

EUVD-2025-33833

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.9CVSS6.7AI score0.00092EPSS
SaveExploits0References3
OSV
OSV
•added 2025/10/11 9:15 a.m.•10 views

CVE-2025-58295

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/11 9:15 a.m.•14 views

CVE-2025-58295

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.9CVSS0.00092EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/11 8:53 a.m.•35 views

CVE-2025-58295

Huawei HarmonyOS development framework module contains a buffer overflow vulnerability that may affect availability. Connected documents corroborate a buffer overflow in the development framework module and its impact on availability, without detailing affected versions, exploitation status, or a...

5.9CVSS5.9AI score0.00092EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/11 8:53 a.m.•5 views

CVE-2025-58295

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.9CVSS5.9AI score0.00092EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/11 8:53 a.m.•24 views

CVE-2025-58295

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.9CVSS0.00092EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/11 12:00 a.m.•2 views

CVE-2025-58295: Stack-based Buffer Overflow

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability...

5.9CVSS5.9AI score0.00092EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/11 12:00 a.m.•15 views

PT-2025-41657

Name of the Vulnerable Software and Affected Versions Development framework module affected versions not specified Description A buffer overflow issue exists within the development framework module. Exploitation of this issue could impact system availability. Recommendations At the moment, there ...

5.9CVSS6.9AI score0.00092EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•16 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS development framework module, which can be exploited by attackers to affect availability...

5.9CVSS7AI score0.00092EPSS
SaveExploits0References1
Rows per page
Query Builder