Lucene search
K

6712 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/15 1:51 a.m.3 views

CVE-2025-48520

An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read Out-of-Bounds potentially resulting in information disclosure or a crash...

6.9CVSS5.8AI score0.00016EPSS
Exploits0References2
CVE
CVE
added 2026/05/15 1:50 a.m.12 views

CVE-2025-48519

CVE-2025-48519 is an AMD PMF (Platform Management Framework) driver vulnerability denoting improper input validation that allows a local attacker to read or write Out-of-Bounds, potentially enabling privilege escalation. The impact is described as local with high impact to confidentiality, integr...

8.5CVSS5.8AI score0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/15 1:50 a.m.38 views

CVE-2025-48519

An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation...

8.5CVSS0.00016EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/15 1:50 a.m.4 views

CVE-2025-48519

An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation...

8.5CVSS5.8AI score0.00016EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/15 12:0 a.m.8 views

PT-2026-41270

Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host...

8.7CVSS6.1AI score0.00052EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/15 12:0 a.m.7 views

PT-2026-41229

An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation...

8.5CVSS5.8AI score0.00016EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/15 12:0 a.m.6 views

AMD Chipset 缓冲区错误漏洞

The AMD Chipset is a series of chips developed by American semiconductor company AMD. The AMD Chipset contains a buffer error vulnerability, which stems from improper input validation. This vulnerability may allow local attackers to read or write data beyond their intended scope, resulting in an...

8.5CVSS6AI score0.00016EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/05/14 6:27 p.m.5 views

NPM: Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation

NPM: Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation vulnerability discovered by ? in WordPress Npm apostrophe versions = 4.29.0...

5.8AI score
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/05/14 8:21 a.m.7 views

CVE-2026-21019

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege...

8.6CVSS6.2AI score0.00039EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/13 6:30 p.m.6 views

EUVD-2026-29907

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

6.8CVSS5.8AI score0.00046EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/13 1:36 p.m.5 views

CVE-2026-8369

Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread before commit 26a882d on all platforms allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh or bypass security checks via crafted IPv4 packets with options...

6CVSS5.8AI score0.00043EPSS
Exploits0References2
NVD
NVD
added 2026/05/13 6:16 a.m.5 views

CVE-2026-21021

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

6.8CVSS0.00046EPSS
Exploits0References1
CVE
CVE
added 2026/05/13 4:56 a.m.8 views

CVE-2026-21021

Technical details are not publicly available in the provided documents. Monitor for updates.

6.8CVSS5.8AI score0.00046EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/13 4:56 a.m.34 views

CVE-2026-21021

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

5.1CVSS0.00046EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/13 4:56 a.m.28 views

CVE-2026-21019

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege...

8.6CVSS0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.4 views

PT-2026-40573

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

5.1CVSS5.8AI score0.00046EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/12 9:31 p.m.6 views

EUVD-2026-29770

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitatio...

6.2CVSS5.8AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/12 9:31 p.m.5 views

EUVD-2026-29771

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitatio...

6.2CVSS5.8AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/12 9:31 p.m.6 views

EUVD-2026-29780

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier NEEDS REVIEW: impact mismatch — ticket says 'Arbitrary file system write', CIA triad derives 'Security Feature Bypass'. Verify CVSS vector before publishing. are affected by an Improper Input...

3.4CVSS5.8AI score0.00059EPSS
Exploits0References2
NVD
NVD
added 2026/05/12 8:16 p.m.8 views

CVE-2026-34685

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier NEEDS REVIEW: impact mismatch — ticket says 'Arbitrary file system write', CIA triad derives 'Security Feature Bypass'. Verify CVSS vector before publishing. are affected by an Improper Input...

3.4CVSS0.00059EPSS
Exploits0References1
Rows per page
Query Builder