Lucene search
+L

1703 matches found

OSV
OSV
•added 2025/11/10 9:15 p.m.•13 views

CVE-2025-63617

ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...

6.5CVSS5.8AI score0.00285EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/10 12:00 a.m.•15 views

ktg-mes 安全漏洞

ktg-mes Bitter Candy MES is a production execution management system by the individual developer kutangguo. A security vulnerability exists in ktg-mes due to the use of a vulnerable version of fastjson and deserialization of insecure input data...

6.5CVSS6.9AI score0.00285EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/10 12:00 a.m.•9 views

CVE-2025-63617

ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...

6.7AI score0.00285EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/11/10 12:00 a.m.•13 views

The vulnerability of the memcpy() function in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the memcpy function in the Android operating system is related to deficiencies in the input data control mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00886EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
•added 2025/11/10 12:00 a.m.•25 views

CVE-2025-63617

ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...

0.00285EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/08 12:00 a.m.•14 views

WordPress plugin Saphali LiqPay for donate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.7AI score0.00216EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/11/07 12:00 a.m.•13 views

The vulnerability of the software for deploying and executing AI models developed with NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) allows a malicious actor to trigger service failures due to insufficient input data validation.

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure...

7.8CVSS5.8AI score0.00346EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/05 4:14 a.m.•12 views

CVE-2025-47365

Memory corruption while processing large input data from a remote source via a communication interface...

7.8CVSS7.1AI score0.00081EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 4:15 a.m.•12 views

CVE-2025-47365

Memory corruption while processing large input data from a remote source via a communication interface...

7.8CVSS0.00081EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/04 3:19 a.m.•35 views

CVE-2025-47365

CVE-2025-47365 concerns a memory corruption issue in Qualcomm Chipsets/Automotive Platform caused by processing large input data received from a remote source over a communication interface. The root cause is described as an integer overflow or wraparound in the affected data handling. Impact is ...

7.8CVSS6.8AI score0.00081EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/11/04 3:19 a.m.•27 views

CVE-2025-47365 Integer Overflow or Wraparound in Automotive Platform

Memory corruption while processing large input data from a remote source via a communication interface...

7.8CVSS0.00081EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•28 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which arises from a memory corruption when processing large input data from a communication interface from a remote source...

7.8CVSS7AI score0.00081EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/29 12:00 a.m.•19 views

The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger a service failure.

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

6.8CVSS5.8AI score0.00306EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/28 12:00 a.m.•8 views

The vulnerability of the Linux operating system’s kernel, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.6CVSS6.7AI score0.00169EPSS
SaveExploits0References14Affected Software3
Redos
Redos
•added 2025/10/28 12:00 a.m.•20 views

ROS-20251028-01

A vulnerability in the Webmin hosting control panel CGI request handler is associated with errors in processing input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code with root privileges...

9.9CVSS7.1AI score0.33467EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2025/10/20 12:00 a.m.•4 views

openSUSE Security Advisory (SUSE-SU-2025:03624-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.01315EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2025/10/20 12:00 a.m.•13 views

The vulnerability of the Windows Authentication component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Authentication component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.0038EPSS
SaveExploits0References2Affected Software25
BDU FSTEC
BDU FSTEC
•added 2025/10/20 12:00 a.m.•27 views

The vulnerability of the DSP microprogramming software service in Qualcomm’s embedded chips lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.4AI score0.0058EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/10/17 12:00 a.m.•18 views

The vulnerability of the Windows operating system’s Search Service allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system’s Search Service is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS7.3AI score0.00501EPSS
SaveExploits0References2Affected Software26
BDU FSTEC
BDU FSTEC
•added 2025/10/17 12:00 a.m.•20 views

The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server Subscription Edition, SharePoint Server, and SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

9CVSS6AI score0.01374EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder