Lucene search
K

65 matches found

CNNVD
CNNVD
added 2026/05/13 12:0 a.m.10 views

Palo Alto Networks Trust Protection Foundation SQL注入漏洞

Palo Alto Networks Trust Protection Foundation is a machine identity and certificate security management platform developed by Palo Alto Networks. Palo Alto Networks Trust Protection Foundation has a SQL injection vulnerability. This vulnerability stems from SQL injection attacks, which may allow...

8.6CVSS6.2AI score0.00248EPSS
Exploits0References1
Redos
Redos
added 2026/05/12 12:0 a.m.12 views

ROS-20260512-73-0014

A vulnerability in the Core component of Oracle VM VirtualBox is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to gain full control over the application...

7.5CVSS7.1AI score0.00227EPSS
Exploits0
Redos
Redos
added 2026/05/12 12:0 a.m.9 views

ROS-20260512-73-0016

A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

7.5CVSS7.1AI score0.00198EPSS
Exploits0
EUVD
EUVD
added 2026/04/24 3:46 a.m.6 views

EUVD-2026-25395

DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-force attacks to gain control over the device...

8.7CVSS5.8AI score0.00454EPSS
Exploits0References2
CNVD
CNVD
added 2026/04/22 12:0 a.m.4 views

Oracle VM VirtualBox Core Component Memory Corruption Vulnerability (CNVD-2026-18426)

Oracle VM VirtualBox is a desktop virtualization software developed by Oracle to create and run virtual machines on host operating systems. A memory corruption vulnerability exists in Oracle VM VirtualBox. The vulnerability stems from a failure of the Core component to properly handle memory...

7.5CVSS8.1AI score0.00107EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/03/26 1:1 p.m.1 views

CVE-2025-55267

HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server...

5.7CVSS5.9AI score0.00295EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/11/05 4:36 p.m.4 views

CVE-2025-46364

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...

9.1CVSS0.00273EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/05 4:27 p.m.2 views

EUVD-2025-37894

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system...

8.4CVSS7.2AI score0.01068EPSS
Exploits0References2
Redos
Redos
added 2025/08/22 12:0 a.m.5 views

ROS-20250822-19

A vulnerability in the 2D component of the Oracle Java SE software platform and Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input validation. and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input...

8.1CVSS8.2AI score0.01058EPSS
Exploits1
Cvelist
Cvelist
added 2025/08/21 7:29 p.m.6 views

CVE-2025-55105 BUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

4.8CVSS0.00207EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/21 12:0 a.m.4 views

PT-2025-34283 · Esri · Esri Portal For Arcgis Enterprise Sites

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 through 11.4 Description: A stored Cross-site Scripting issue exists in Esri Portal for ArcGIS Enterprise Sites that may allow a remote, authenticated attacker to inject a malicious file...

4.8CVSS5.5AI score0.00209EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 5:38 a.m.5 views

CVE-2018-17878

Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprintf function...

9.8CVSS7.1AI score0.00831EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.5 views

The vulnerability of the MongoDB database management system, due to issues with process management, allows attackers to load arbitrary libraries and gain full control over the application.

The vulnerability of the MongoDB database management system exists due to a problem with process management. Exploiting this vulnerability allows an attacker to load arbitrary libraries and gain full control over the application by executing a specially created binary file...

6.8CVSS7.7AI score0.00203EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/06/20 11:15 a.m.19 views

CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

7.8CVSS0.00219EPSS
Exploits0References6
OSV
OSV
added 2024/06/20 11:15 a.m.0 views

UBUNTU-CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

7.8CVSS6.2AI score0.00219EPSS
Exploits0References9
OSV
OSV
added 2024/06/20 11:13 a.m.16 views

CVE-2022-48717 ASoC: max9759: fix underflow in speaker_gain_control_put()

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

7.8CVSS6AI score0.00219EPSS
Exploits0References9
Cvelist
Cvelist
added 2024/06/20 11:13 a.m.39 views

CVE-2022-48717 ASoC: max9759: fix underflow in speaker_gain_control_put()

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

0.00219EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2024/06/20 11:13 a.m.17 views

CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

7.8CVSS5.3AI score0.00219EPSS
Exploits0
CNNVD
CNNVD
added 2024/06/20 12:0 a.m.3 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from an integer underflow in the ASoC:max9759 module Speakergaincontrolput...

7.8CVSS6.6AI score0.00219EPSS
Exploits0References9
UbuntuCve
UbuntuCve
added 2024/06/20 12:0 a.m.15 views

CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

7.8CVSS6.2AI score0.00219EPSS
Exploits0References8
Rows per page
Query Builder