Lucene search
K

11189 matches found

CNNVD
CNNVD
added 2025/02/06 12:0 a.m.3 views

IBM ApplinX 安全漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. A security vulnerability exists in IBM ApplinX. An attacker could exploit the vulnerability to obtain sensitive information when the browser returns a...

4.3CVSS6.1AI score0.00059EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.1 views

The vulnerability of Fortinet FortiClientWindows security devices, related to context switching privilege errors, allows attackers to elevate their privileges.

The vulnerability of Fortinet FortiClientWindows protection devices is related to context switching privilege errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.8CVSS0.00168EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/06 12:0 a.m.2 views

PT-2025-5871 · Ibm · Ibm Entirex

Name of the Vulnerable Software and Affected Versions: IBM EntireX version 11.1 Description: The issue could allow a local user to cause a denial of service due to an unhandled error and fault isolation. Recommendations: For IBM EntireX version 11.1, at the moment, there is no information about a...

5.5CVSS5.9AI score0.0008EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/02/06 12:0 a.m.1 views

IBM EntireX 安全漏洞

IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. A security vulnerability exists in IBM EntireX version 11.1 that stems from the presence of unhandled...

5.5CVSS6.5AI score0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/06 12:0 a.m.3 views

CVE-2024-25883

The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...

5.2AI score0.00114EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:5 p.m.5 views

CVE-2022-1848

Business Logic Errors in GitHub repository erudika/para prior to 1.45.11...

9CVSS6.6AI score0.00363EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:33 a.m.2 views

CVE-2024-1848

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024. These vulnerabilities...

7.8CVSS7.9AI score0.00076EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/05 12:0 a.m.1 views

Cisco IOS、Cisco IOS XE和Cisco IOS XR 安全漏洞

Cisco IOS, among others, are a set of operating systems developed by Cisco, an American company, for its network devices. A security vulnerability exists in Cisco IOS, Cisco IOS XE, and Cisco IOS XR, which stems from mishandling of errors when parsing requests, which can result in a device reboot...

7.7CVSS6.5AI score0.00301EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/05 12:0 a.m.1 views

The vulnerability of the mm/mremap.c module in Android operating systems allows attackers to increase their privileges.

The vulnerability of the mm/mremap.c module in Android operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS
Exploits1References3
OSV
OSV
added 2025/02/04 10:6 p.m.8 views

GO-2025-3437 Argo CD GitOps Engine does not scrub secret values from patch errors in github.com/argoproj/gitops-engine

Argo CD GitOps Engine does not scrub secret values from patch errors in github.com/argoproj/gitops-engine. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

6.8AI score
Exploits0References4
OSV
OSV
added 2025/02/04 10:6 p.m.8 views

GO-2025-3433 Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd

Argo CD does not scrub secret values from patch errors in github.com/argoproj/argo-cd...

6.8CVSS6.7AI score0.00156EPSS
Exploits0References5
OSV
OSV
added 2025/02/04 10:7 a.m.3 views

CLSA-2025-1738663660 kernel: Fix of 11 CVEs

ELF: fix kernel.randomizevaspace double read CVE-2024-46826 - smb: client: fix UAF in async decryption CVE-2024-50047 - net: do not delay dstentriesadd in dstrelease CVE-2024-50036 - net: atlantic: eliminate double free in error handling logic CVE-2023-52664 - smb: client: fix potential UAF in...

7.8CVSS7.2AI score0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.0 views

IBM Security Verify Access 安全漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. A security vulnerability exists in the IBM Security Verify Access Appliance, which stems from a vulnerability that could allow a remote attacker to gain access to sensitive...

5.3CVSS6.4AI score0.00069EPSS
Exploits0References1
NVD
NVD
added 2025/02/03 5:15 p.m.10 views

CVE-2024-38412

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...

7.8CVSS0.00078EPSS
Exploits0References1
CVE
CVE
added 2025/02/03 4:51 p.m.52 views

CVE-2024-38412

CVE-2024-38412 is a memory-corruption issue linked to IOCTL handling of session errors in Qualcomm chipsets. Multiple connected sources confirm a kernel-space/ user-space IOCTL path as the root cause, with local access required and high impact to confidentiality, integrity, and availability per C...

7.8CVSS6.7AI score0.00078EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/03 4:51 p.m.8 views

CVE-2024-38412 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...

6.6CVSS7.1AI score0.00078EPSS
Exploits0References1
OSV
OSV
added 2025/02/03 9:39 a.m.15 views

SUSE-SU-2025:0328-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

7.5CVSS7.6AI score0.01988EPSS
Exploits0References15
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.1 views

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to errors that occur after deallocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS0.00014EPSS
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.1 views

The vulnerability of the misc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the misc component in the Linux operating system’s kernel is related to errors that occur after release. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.4CVSS0.00047EPSS
Exploits0References16Affected Software10
Redos
Redos
added 2025/02/03 12:0 a.m.152 views

ROS-20250203-11

A vulnerability in the luaupvaluejoin function lapi.c of the Lua script interpreter is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service Vulnerability in the luaresume ldo.c component of the Lua...

7.5CVSS5.4AI score0.02019EPSS
Exploits7
Rows per page
Query Builder