Lucene search
K

6728 matches found

RedhatCVE
RedhatCVE
added 2025/12/02 8:23 a.m.5 views

CVE-2025-61619

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

7.5CVSS6.7AI score0.00158EPSS
Exploits0References1
Veracode
Veracode
added 2025/12/02 6:42 a.m.4 views

Improper Input Validation

github.com/cometbft/cometbft is vulnerable to Improper Input Validation. The vulnerability is due to the lack of validation for BitArrays with mismatched element and bit counts, which allows an attacker to supply malformed BitArrays that can trigger processing errors or panics within the system...

7AI score
Exploits0
EUVD
EUVD
added 2025/12/02 3:31 a.m.2 views

EUVD-2025-200159

In display, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4820...

7.8CVSS6.4AI score0.00006EPSS
Exploits0References2
OSV
OSV
added 2025/12/02 2:15 a.m.3 views

CVE-2025-58486

Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script...

5.5CVSS6AI score0.00027EPSS
Exploits0References1
NVD
NVD
added 2025/12/02 2:15 a.m.3 views

CVE-2025-58475

Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

5.6CVSS0.00022EPSS
Exploits0References1
CVE
CVE
added 2025/12/02 1:24 a.m.6 views

CVE-2025-58486

CVE-2025-58486 affects Samsung Account prior to version 15.5.01.1 due to improper input validation, enabling a local attacker to execute arbitrary script. Documented across multiple sources (Red Hat, NVD, CVE lists, CNVD, ENISA EUVD) consistently identify the same flaw and impact. The affected so...

5.5CVSS6.7AI score0.00027EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/02 1:24 a.m.1 views

CVE-2025-58486

Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script...

4CVSS6.7AI score0.00027EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/02 1:24 a.m.4 views

CVE-2025-58485

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS0.00022EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/02 1:24 a.m.3 views

EUVD-2025-200143

Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

5.6CVSS6AI score0.00022EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.2 views

PT-2025-48610

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker can exploit this by having a...

5.3CVSS6.5AI score0.00089EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.3 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from improper input validation and could result in out-of-bounds memory writes...

5.6CVSS6.6AI score0.00022EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48615

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

6.8AI score0.00228EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48628

In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4802...

6.7AI score0.00006EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.3 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation and could lead to a remote denial of service attack...

6.5CVSS6.4AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48603

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 29.0.0.48 Description Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script. This allows for the execution of malicious code within the...

5.5CVSS5.7AI score0.00022EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation and could lead to a remote denial of service...

5.3CVSS6.5AI score0.00228EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation and could lead to a remote denial of service attack...

6.5CVSS6.4AI score0.00089EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.2 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation, which could result in memory corruption and local elevation of privilege...

7.8CVSS6.6AI score0.00006EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.3 views

PT-2025-48617

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

6.8AI score0.00045EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/01 5:49 p.m.10 views

Security Bulletin: IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752.

Summary IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-55173 DESCRIPTION: Next.js is a React framework for building full-stack...

6.2CVSS6.7AI score0.00687EPSS
Exploits0Affected Software1
Rows per page
Query Builder