Lucene search
+L

3184 matches found

OSV
OSV
added 2025/03/15 12:15 p.m.7 views

CVE-2025-2321

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be...

6.5CVSS6.2AI score0.0043EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/03/15 12:00 p.m.8 views

CVE-2025-2321 274056675 springboot-openai-chatgpt addData logic error

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be...

6.5CVSS6.7AI score0.0043EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/03/15 3:28 a.m.15 views

CVE-2024-56187

In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

6.6CVSS6.2AI score0.00081EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/15 12:00 a.m.11 views

springboot-openai-chatgpt 安全漏洞

springboot-openai-chatgpt is a SpringCloud microservices architecture based on SpringCloud by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from a business logic error and could lead to a remote attack...

6.5CVSS6.5AI score0.0043EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/03/13 12:47 p.m.24 views

CVE-2025-1636

Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faul...

0.01693EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/13 12:00 a.m.11 views

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.3.29 and earlier, which stems from a business logic error in the My Personal...

6.5CVSS6.8AI score0.01693EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/12 12:00 a.m.43 views

Google Pixel Logic Error Vulnerability (CNVD-2025-05455)

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a logic error vulnerability that originates from a code logic error in ppcfw.c's ppcfwdenysecdramaccess, which can be exploited by an attacker to cause an arbitrary read from the TEE memory without...

6.6CVSS7.3AI score0.00081EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/12 12:00 a.m.11 views

PT-2025-11057 · Google · Android

Name of the Vulnerable Software and Affected Versions: main.cpp affected versions not specified Description: A logic error in the code within main of main.cpp may allow bypassing SELinux. This could lead to local escalation of privilege without requiring additional execution privileges or user...

8.8CVSS7.5AI score0.00295EPSS
SaveExploits0References5
CVE
CVE
added 2025/03/10 6:19 p.m.82 views

CVE-2024-56187

CVE-2024-56187 involves a logic error in Google Pixel’s ppcfw_deny_sec_dram_access (ppcfw.c) that allows an arbitrary read of TEE memory, enabling local information disclosure with System privileges and no user interaction required. Affected: Pixel devices; root cause: logic flaw in memory access...

6.6CVSS6.3AI score0.00081EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/10 12:00 a.m.10 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a logic error vulnerability that originates from a code logic error in ppcfw.c's ppcfwdenysecdramaccess, which can be exploited by an attacker to cause an arbitrary read from the TEE memory without...

6.6CVSS7.2AI score0.00081EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/03/06 3:01 a.m.9 views

SUSE CVE-2025-22413

In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS6AI score0.00095EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2024-5458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, due to a code logic error, filtering functions such as filtervar when validating URLs...

5.3CVSS6.3AI score0.12117EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2024-11612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected...

6.5CVSS6.8AI score0.01703EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/01 12:00 a.m.28 views

ASB-A-373638114

In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS6.8AI score0.00095EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/01 12:00 a.m.13 views

PUB-A-365755647

there is a possible DoS due to a logic error in the code. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS6.9AI score0.01051EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/01 12:00 a.m.28 views

ASB-A-382775095

In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS7.3AI score0.00295EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/01 12:00 a.m.33 views

ASB-A-375404242

In multiple functions of sdpserver.cc, there is a possible use after free due to a logic error in the code. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS7.8AI score0.00168EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the IGCREMOVED logic in the igc driver not being implemented correctly...

5.5CVSS5.5AI score0.00256EPSS
SaveExploits0References6
OSV
OSV
added 2025/02/25 8:15 p.m.9 views

CVE-2024-45424

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access...

7.5CVSS5.8AI score0.00356EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/25 8:15 p.m.25 views

CVE-2024-45424

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access...

7.5CVSS0.00356EPSS
SaveExploits0References1
Rows per page
Query Builder