Lucene search
+L

27620 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/13 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-12910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug...

6.2CVSS6.6AI score0.00105EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/11/13 12:00 a.m.21 views

CVE-2025-60696

A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers Firmware FWv2.0.152112301012. The arplookup function parses lines from /proc/net/arp using sscanf"%16s ... %18s ...", storing results into buffers v6 12 bytes and v7 20 bytes. Since the form...

0.00231EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/13 12:00 a.m.7 views

CVE-2025-60696

A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers Firmware FWv2.0.152112301012. The arplookup function parses lines from /proc/net/arp using sscanf"%16s ... %18s ...", storing results into buffers v6 12 bytes and v7 20 bytes. Since the form...

7.4AI score0.00231EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/13 12:00 a.m.10 views

Dell Alienware Command Center 安全漏洞

DELL Alienware Command Center is Dell's proprietary control software for Alienware-branded computers, which is used to customize hardware features, optimize performance and manage game settings. DELL Alienware Command Center has a temporary file insecurity vulnerability that can be exploited by...

6.6CVSS6.7AI score0.00113EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/13 12:00 a.m.21 views

CVE-2025-60692

A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The functions getmacfromip and getipfrommac use sscanf with overly permissive "%100s" format specifiers to parse entries from /proc/net/arp into...

0.00231EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/13 12:00 a.m.19 views

PT-2025-46895

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering...

6.6CVSS6.4AI score0.00099EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/12 7:50 p.m.6 views

CVE-2024-48829

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code 'Code Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

6.7CVSS6.1AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/12 7:50 p.m.15 views

CVE-2024-48829

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code 'Code Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

6.7CVSS0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/12 6:01 p.m.10 views

CVE-2025-60706

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

5.5CVSS5.1AI score0.00467EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/12 6:01 p.m.6 views

CVE-2025-59508

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Speech allows an authorized attacker to elevate privileges locally...

7CVSS5.5AI score0.00246EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/12 2:15 p.m.13 views

CVE-2025-11566

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...

6.9CVSS0.00544EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/12 1:26 p.m.19 views

CVE-2025-11566

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...

6.9CVSS0.00544EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/12 10:01 a.m.9 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome allowed a local attacker to obtain potentially sensitive information via debug logs...

6.2CVSS5.8AI score0.00105EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/11/12 12:40 a.m.6 views

kernel: crypto: xts - Handle EBUSY correctly

A flaw use after free in the Linux kernel XTS XOR Encrypt XOR with ciphertext stealing crypto Kernel module was found in the way privileges user triggers XTS crypto API in specific way. A local user could use this flaw to crash the system or potentially escalate their privileges on the system...

7.8CVSS7.2AI score0.00161EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/11/12 12:36 a.m.16 views

CVE-2024-57695

An issue in Agnitum Outpost Security Suite 7.5.3 3942.608.1810 and 7.6 3984.693.1842 allows a local attacker to execute arbitrary code via the lock function. The manufacturer fixed the vulnerability in version 8.0 4164.652.1856 from December 17, 2012...

7.7CVSS7.6AI score0.00209EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/11/12 12:00 a.m.17 views

PT-2025-46690

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...

7.7CVSS7.1AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/12 12:00 a.m.22 views

PT-2025-46683

Name of the Vulnerable Software and Affected Versions Fujitsu fbiosdrv.sys versions prior to 2.5.0.0 Description The fbiosdrv.sys driver used by Fujitsu systems contains flaws that could allow a local attacker with high privileges to compromise system confidentiality, integrity, and availability...

8.2CVSS6.3AI score0.00147EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/11/12 12:00 a.m.9 views

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2025-2355)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to...

3.7CVSS5.5AI score0.00397EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/11 9:15 p.m.8 views

CVE-2025-40763

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary...

8.5CVSS0.00138EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/11 9:15 p.m.9 views

CVE-2025-40760

A vulnerability has been identified in Altair Grid Engine All versions V2026.0.0. Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes fo...

6.8CVSS0.00132EPSS
SaveExploits0References1
Rows per page
Query Builder