Lucene search
+L

18550 matches found

Vulnrichment
Vulnrichment
•added 2025/01/05 4:00 p.m.•14 views

CVE-2025-0223 IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference...

6.8CVSS6.4AI score0.00356EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/05 4:00 p.m.•78 views

CVE-2025-0223

CVE-2025-0223 affects IObit Protected Folder (up to 13.6.0.5). The flaw is in IOCTL Handler’s IURegistryFilter.sys, specifically functions 0x8001E000/0x8001E00C/0x8001E004/0x8001E010, whose manipulation yields a null pointer dereference. Local access is required. Public exploit disclosure is note...

6.8CVSS5.5AI score0.00356EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/01/02 12:00 a.m.•11 views

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. An access control error vulnerability exists in D-Link DIR-816 A2 version 1.10CNB05R1B011D88210, which stems from improper access control in /goform/form2LocalAclEditcfg.cgi. An attacker can exploit this vulnerability to be able ...

6.9CVSS6.6AI score0.01088EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•5 views

PT-2025-34589

Name of the Vulnerable Software and Affected Versions: jqlang versions prior to 1.7 Description: A vulnerability was determined in jqlang jq. The run jq tests function within the jq test.c file of the JSON Parser component is affected. Manipulation can lead to a reachable assertion. The attack...

5.5CVSS5.5AI score0.00216EPSS
SaveExploits1References24
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•11 views

PT-2025-21118

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue is related to the incorrect initialization of resources in the branch prediction unit for some IntelR Core Ultra Processors. This may allow an authenticated...

6.8CVSS7.3AI score0.00268EPSS
SaveExploits0References102
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•5 views

PT-2025-49981

Name of the Vulnerable Software and Affected Versions EDK2 affected versions not specified Description EDK2 contains a flaw in BIOS related to improper input validation. A local attacker may exploit this issue to alter control flow, potentially leading to arbitrary command execution. This could...

8.4CVSS6.5AI score0.00772EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•8 views

PT-2025-32389 · Gnu +1 · Gnu Bison +1

Name of the Vulnerable Software and Affected Versions: GNU Bison versions through 3.8.2 Description: A problematic vulnerability has been found in GNU Bison. The issue affects the code free function within the src/scan-code.c file, leading to a double free condition. The attack requires local...

4.8CVSS3.4AI score0.00019EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•12 views

PT-2025-32537 · Unknown +1 · Nasm Netwide Assember +1

Name of the Vulnerable Software and Affected Versions: NASM Netwide Assember version 2.17rc0 Description: A heap-based buffer overflow exists in the macho no dead strip function within the outmacho.c file. Local access is required for exploitation. The exploit for this issue has been publicly...

5.3CVSS5.3AI score0.00259EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•8 views

PT-2025-32545

Name of the Vulnerable Software and Affected Versions: LibTIFF versions prior to 4.5.1 Description: A stack-based buffer overflow issue exists in the tiffcrop component of LibTIFF, specifically within the readSeparateStripsetoBuffer function located in the tools/tiffcrop.c file. Local access is...

5.3CVSS6.8AI score0.0018EPSS
SaveExploits0References59
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•5 views

PT-2025-30997 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.44 Description: A problematic issue exists in the BFD Library component of GNU Binutils. The bfd elf get str section function within the bfd/elf.c file is susceptible to a null pointer dereference. Local access is...

5.5CVSS3.6AI score0.00232EPSS
SaveExploits1References19
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•6 views

PT-2025-30999 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.44 Description: A memory leak issue exists in the DWARF Section Handler component, specifically within the process debug info function of the binutils/dwarf.c file. Local access is required for exploitation...

4.8CVSS3.7AI score0.0023EPSS
SaveExploits1References17
CNVD
CNVD
•added 2024/12/30 12:00 a.m.•12 views

DELL NativeEdge Information Disclosure Vulnerability

DELL NativeEdge is an edge operations software platform from Dell Technologies designed to simplify the deployment, management and secure scaling of edge computing environments. DELL NativeEdge suffers from an information disclosure vulnerability that stems from improperly set permissions on...

6.5CVSS6.1AI score0.00172EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/27 12:00 a.m.•19 views

Dell NativeEdge Elevation of Privilege Vulnerability

Dell NativeEdge is a software provided by Dell for managing and configuring network devices. A security vulnerability exists in Dell NativeEdge. An attacker could exploit the vulnerability to locally access the system with low privileges, resulting in elevated privileges...

7.8CVSS7.1AI score0.0017EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/25 4:15 p.m.•10 views

CVE-2024-52543

Dell NativeEdge, versions 2.1.0.0, contains a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

4.4CVSS5.8AI score0.00172EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/25 3:15 p.m.•14 views

CVE-2024-47978

Dell NativeEdge, versions 2.1.0.0, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/25 3:13 p.m.•12 views

CVE-2024-52543

Dell NativeEdge, versions 2.1.0.0, contains a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

6.5CVSS6AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/25 12:00 a.m.•10 views

Dell NativeEdge 安全漏洞

DELL NativeEdge is an edge operations software platform from Dell Technologies designed to simplify the deployment, management and secure scaling of edge computing environments. DELL NativeEdge suffers from an information disclosure vulnerability that stems from improperly set permissions on...

6.5CVSS6AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/25 12:00 a.m.•10 views

Dell NativeEdge 安全漏洞

Dell NativeEdge is a software provided by Dell for managing and configuring network devices. A security vulnerability exists in Dell NativeEdge. An attacker could exploit the vulnerability to locally access the system with low privileges, resulting in elevated privileges...

7.8CVSS6.7AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/25 12:00 a.m.•16 views

PT-2024-32928 · Dell · Dell Nativeedge

Name of the Vulnerable Software and Affected Versions: Dell NativeEdge version 2.1.0.0 Description: The issue is related to an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

7.8CVSS6.7AI score0.0017EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/12/25 12:00 a.m.•16 views

PT-2024-35368 · Dell · Dell Nativeedge

Name of the Vulnerable Software and Affected Versions: Dell NativeEdge version 2.1.0.0 Description: The issue is related to the creation of temporary files with insecure permissions. A high-privileged attacker with local access could potentially exploit this, leading to information disclosure...

6.5CVSS6.7AI score0.00172EPSS
SaveExploits0References7
Rows per page
Query Builder