Lucene search
K

13 matches found

CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

Philips Hue Bridge 安全漏洞

The Philips Hue Bridge is a smart lighting gateway device developed by the Japanese company Philips Hue. There is a security vulnerability present in the Philips Hue Bridge, which stems from the lack of validation for the length of user data in the hkhappairstorageput function. This vulnerability...

8.8CVSS7.7AI score0.00123EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 a.m.2 views

CVE-2025-15272

FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a...

8.8CVSS7.5AI score0.00101EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.3 views

PT-2025-35608

Name of the Vulnerable Software and Affected Versions: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the...

8.8CVSS8.7AI score0.00022EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2014-7912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getoption function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship...

6.8CVSS6.2AI score0.00803EPSS
Exploits0References2
OSV
OSV
added 2025/08/11 7:15 p.m.1 views

CVE-2025-51823

libcsp 2.0 is vulnerable to Buffer Overflow in the cspethinit function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member ctx-name without validating the input length...

6.5CVSS7AI score
Exploits0References2
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.2 views

Digital China Networks DCBC Gateway 安全漏洞

Digital China Networks DCBC Gateway is a gateway program from Digital China Networks China. A security vulnerability exists in Digital China Networks DCBC Gateway version 200-2.1.1, which stems from a lack of length validation and a buffer overflow vulnerability that could cause a remote target...

5.1CVSS7.7AI score0.00088EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.1 views

H3C N12 V100R005 安全漏洞

The H3C N12 V100R005 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C N12 V100R005 version, which stems from a lack of length validation in the 5G wireless network processing function, which could lead to an attacker crashing a remote target device or...

9.8CVSS7.1AI score0.00333EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.1 views

H3C N12 V100R005 安全漏洞

The H3C N12 V100R005 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C N12 V100R005 version, which stems from a lack of length validation in the AP configuration function, which could allow an attacker to crash a remote target device or execute arbitrary...

9.8CVSS7.4AI score0.00313EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.1 views

PT-2023-8812 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this, where the target must visit ...

7.8CVSS7.2AI score0.01049EPSS
Exploits0References5
OSV
OSV
added 2022/02/14 12:15 p.m.1 views

CVE-2022-0214

The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog...

7.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/01/14 7:15 a.m.2 views

AZL-7533 CVE-2022-23219 affecting package glibc for versions less than 2.35-1

The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or if an application is no...

9.8CVSS7.4AI score0.00573EPSS
Exploits1References1
OSV
OSV
added 2018/01/24 3:29 p.m.1 views

DEBIAN-CVE-2017-12180

xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

9.8CVSS7.6AI score0.00502EPSS
Exploits0References1
OSV
OSV
added 2017/10/12 12:0 a.m.0 views

UBUNTU-CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

9.8CVSS7.5AI score0.0095EPSS
Exploits0References4
Rows per page
Query Builder