Lucene search
+L

5023 matches found

osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•26 views

ASB-A-377672115

In multiple functions of mremap.c, there is a possible use-after-free scenario in physical memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5AI score
SaveExploits1References3
OSV
OSV
•added 2025/01/29 2:15 a.m.•15 views

CVE-2025-0797

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...

4.8CVSS4.6AI score0.00302EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/01/29 1:00 a.m.•43 views

CVE-2025-0797 MicroWorld eScan Antivirus Quarantine Microworld default permission

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be...

4.8CVSS0.00302EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/01/29 12:00 a.m.•27 views

PT-2025-4056

Name of the Vulnerable Software and Affected Versions MicroWorld eScan Antivirus version 7.0.32 Description The issue affects the Quarantine Handler component, specifically the file /var/Microworld/, leading to incorrect default permissions. This can be exploited locally, and the exploit has been...

4.8CVSS4.4AI score0.00302EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•25 views

PT-2025-2590 · Google · Android Wificonfigurationutil

Name of the Vulnerable Software and Affected Versions: Android WifiConfigurationUtil affected versions not specified Description: A logic error in the code of WifiConfigurationUtil.java, specifically in the validateSsid function, could lead to a local denial of service due to a possible overflow ...

5.3CVSS7AI score0.00214EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/01/27 12:00 a.m.•26 views

PT-2025-4024 · Discord · Discord

Name of the Vulnerable Software and Affected Versions: Discord versions up to 1.0.9177 Description: A problem has been found in Discord that affects some unknown functionality in the profapi.dll library, leading to an untrusted search path. The attack must be approached locally and has a rather...

4.5CVSS6.9AI score0.00165EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/01/26 12:00 a.m.•23 views

PT-2025-4020

Name of the Vulnerable Software and Affected Versions Microword eScan Antivirus version 7.0.32 Description A problematic issue has been found, affecting the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner in the component Folder Watch List Handler. This issue leads to a...

5.5CVSS4.4AI score0.00214EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2025/01/23 3:49 a.m.•6 views

SUSE CVE-2024-57360

https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function...

5.5CVSS7AI score0.00254EPSS
SaveExploits0References3
osv-ubuntu
osv-ubuntu
•added 2025/01/21 9:15 p.m.•19 views

UBUNTU-CVE-2024-57360

https://www.gnu.org/software/binutils/ nm =2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: nm --without-symbol-version function...

5.5CVSS5.8AI score0.00254EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/01/21 12:00 a.m.•19 views

Google Android 安全漏洞

Google Android is a Linux-based operating system from the American company Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checking and can be exploited to bypass the read permission of a content provider. An attacker can exploit the...

7.8CVSS6.5AI score0.00084EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/17 3:15 p.m.•15 views

CVE-2025-0529

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...

7.8CVSS5.9AI score0.00362EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/15 4:36 a.m.•15 views

CVE-2025-21101

Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion...

6.6CVSS6.4AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/15 4:36 a.m.•89 views

CVE-2025-21101

Dell Display Manager (Windows) prior to version 2.3.2.20 contains a race condition vulnerability during installation. A local attacker could potentially exploit this to delete arbitrary folders or files. Root cause: insufficient synchronization of shared resources during installation. Affected pr...

6.6CVSS6.8AI score0.00104EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/06 12:00 a.m.•20 views

PT-2025-2280 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a possible out of bounds write due to an incorrect bounds check in Modem. This could lead to local escalation of privilege if a malicious actor has already obtained th...

6.7CVSS6.3AI score0.00169EPSS
SaveExploits0References7
OSV
OSV
•added 2025/01/05 3:15 p.m.•16 views

CVE-2025-0221

A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached...

5.5CVSS4.4AI score0.00359EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/01/05 3:00 p.m.•65 views

CVE-2025-0221 IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereference

A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached...

6.8CVSS0.00359EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•25 views

PT-2025-32407 · Gnu +1 · Gnu Cflow +1

Name of the Vulnerable Software and Affected Versions: GNU cflow versions up to 1.8 Description: A critical vulnerability exists in GNU cflow up to version 1.8. The issue is located in the yylex function within the c.c file of the Lexer component and leads to a buffer overflow. Local access is...

5.3CVSS5.4AI score0.0017EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•16 views

PT-2025-35217

Name of the Vulnerable Software and Affected Versions appneta tcpreplay version 4.5.1 Description A security issue has been identified in the calc sleep time function within the send packets.c file. Manipulation of this function can lead to a divide by zero error. Exploitation requires local...

5.5CVSS3.8AI score0.0025EPSS
SaveExploits1References42
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•15 views

PT-2025-32541 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A stack-based buffer overflow exists in the parse line function within the parser.c file. The issue is locally exploitable and has been publicly disclosed. Recommendations: At the moment,...

5.3CVSS5.2AI score0.00288EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•13 views

PT-2025-32538 · Unknown +1 · Nasm Netwide Assembler +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assembler version 2.17rc0 Description: A flaw exists in the parse smacro template function within the preproc.c file. This issue leads to a null pointer dereference. Local access is required for exploitation. An exploit has been...

4.8CVSS3.4AI score0.00266EPSS
SaveExploits1References19
Rows per page
Query Builder