Lucene search
+L

38454 matches found

RedhatCVE
RedhatCVE
added 2025/12/04 12:11 a.m.11 views

CVE-2025-54326

An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera device driver can lead to a NULL pointer dereference, resulting in a denial of service...

7.5CVSS6.8AI score0.00296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.13 views

PT-2025-49155

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 11.0 through 11.12.4+541730 WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 12.5 through 12.5.13 WatchGuard Fireware OS versions 2025.1 through 2025.1.2 Description An...

9CVSS7.5AI score0.00602EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/12/03 2:2 p.m.9 views

CVE-2025-58485

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS6.6AI score0.00116EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/03 12:0 a.m.4 views

CVE-2025-54326

An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera device driver can lead to a NULL pointer dereference, resulting in a denial of service...

6.4AI score0.00296EPSS
SaveExploits0References2
Circl
Circl
added 2025/12/02 2:45 p.m.7 views

CVE-2025-41086

creationtimestamp| type| source ---|---|--- 2025-12-02 14:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6z6nkqwl22a...

6.9CVSS5.7AI score0.00209EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/02 2:15 a.m.7 views

CVE-2025-58485

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS5.9AI score0.00116EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/02 2:15 a.m.7 views

CVE-2025-58485

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS0.00116EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/02 1:24 a.m.14 views

CVE-2025-58485

Samsung Internet prior to 29.0.0.48 is affected by an input validation issue that allows local attackers to inject arbitrary script. The root cause is improper input validation in the browser component, enabling local exploitation without network access. Impact is confined to local attack vectors...

5.5CVSS6.2AI score0.00116EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/02 1:24 a.m.17 views

CVE-2025-58485

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS0.00116EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/02 1:24 a.m.4 views

CVE-2025-58485

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS6.2AI score0.00116EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/02 1:24 a.m.7 views

EUVD-2025-200133

Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...

5.5CVSS6.1AI score0.00116EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.9 views

SAMSUNG Internet 安全漏洞

SAMSUNG Internet is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a browser function. A security vulnerability exists in SAMSUNG Internet versions prior to 29.0.0.48, which stems from improper input validation and could allow a local attacker to inject...

5.5CVSS6.4AI score0.00116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.8 views

PT-2025-48603

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 29.0.0.48 Description Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script. This allows for the execution of malicious code within the...

5.5CVSS5.7AI score0.00116EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/12/01 12:43 p.m.4 views

CVE-2025-12106

Insufficient argument validation in OpenVPN 2.7alpha1 through 2.7rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses...

6.7AI score0.00543EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/01 12:0 a.m.13 views

PT-2025-48441

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.7 alpha1 through 2.7 rc1 Description A flaw exists in OpenVPN due to inadequate argument validation. This issue allows an attacker to potentially cause a heap buffer over-read when processing IP addresses. Recommendations...

9.4CVSS8AI score0.00543EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2025/11/27 6:2 p.m.7 views

CVE-2025-64126

An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary...

10CVSS7.7AI score0.02435EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2025/11/27 10:3 a.m.20 views

ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories

Hackers have been busy again this week. From fake voice calls and AI-powered malware to huge money-laundering busts and new scams, there's a lot happening in the cyber world. Criminals are getting creative — using smart tricks to steal data, sound real, and hide in plain sight. But they're not th...

9.8CVSS7AI score0.99968EPSS
SaveExploits61
Cvelist
Cvelist
added 2025/11/26 5:47 p.m.47 views

CVE-2025-64126 Zenitel TCIV-3+ OS Command Injection

An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary...

10CVSS0.02435EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/11/26 12:0 a.m.12 views

Digital Twin-Driven Secure Access Strategy for SAGIN-Enabled IoT Networks

In space-air-ground integrated networks SAGIN-enabled IoT networks, secure access has become a significant challenge due to the increasing risks of eavesdropping attacks. To address these threats to data confidentiality, this paper proposes a Digital Twin DT-driven secure access strategy. The...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/11/25 3:27 p.m.7 views

CLSA-2025-1764084458 bind: Fix of 2 CVEs

CVE-2025-40780: fix randomness sources, drop obsolete PRNG test - CVE-2025-40778: fix NS caching, DNAME/referral handling, restore IPv6 TCP tests...

8.6CVSS6.9AI score0.00665EPSS
SaveExploits1References1
Rows per page
Query Builder