Lucene search
+L

2282 matches found

CVE
CVE
added 2025/11/18 5:01 p.m.20 views

CVE-2025-61713

FortiPAM vulnerability CVE-2025-61713 affects Fortinet FortiPAM 1.0 through 1.6.0. A cleartext storage of sensitive information in memory (CWE-316) enables an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators’ credentials via diagnose commands. Impa...

4.4CVSS6.3AI score0.00109EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/11/18 12:00 a.m.7 views

The vulnerability of the gst-plugins-good plugin for the Gstreamer multimedia framework allows a hacker to access confidential information.

The vulnerability of the gst-plugins-good plugin for the Gstreamer multimedia framework relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

3.3CVSS6.9AI score0.00625EPSS
SaveExploits1References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/11/13 12:00 a.m.10 views

The vulnerability of Mozilla Firefox and Thunderbird browsers relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox and Thunderbird browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS7.8AI score0.00332EPSS
SaveExploits0References9Affected Software3
Redos
Redos
added 2025/11/12 12:00 a.m.8 views

ROS-20251112-07

Vulnerability in Google Chrome browser's JavaScript script handler V8 is related to information disclosure through inconsistency. Exploitation of the vulnerability could allow an attacker, acting remotely, gain unauthorized access to protected information A vulnerability in the WebRTC component o...

9.1CVSS7AI score0.06608EPSS
SaveExploits0
Mageia
Mageia
added 2025/11/09 7:52 a.m.12 views

Updated libxml2 & libxslt packages fix security vulnerabilities

Heap use after free UAF leads to Denial of service DoS. CVE-2025-49794 Null pointer dereference leads to Denial of service DoS. CVE-2025-49795 Type confusion leads to Denial of service DoS. CVE-2025-49796 Integer Overflow Leading to Buffer Overflow in xmlBuildQName. CVE-2025-6021 Stack-based Buff...

9.1CVSS7AI score0.01483EPSS
SaveExploits2References3
NVD
NVD
added 2025/11/04 2:15 a.m.7 views

CVE-2025-43447

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory...

5.5CVSS0.00179EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/11/04 1:17 a.m.7 views

CVE-2025-43431

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

6.1AI score0.00804EPSS
SaveExploits0References7
Ubuntu
Ubuntu
added 2025/10/29 11:49 a.m.12 views

USN-7846-1: X.Org X Server vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code...

7.3CVSS5.9AI score0.00474EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2025/10/23 12:00 a.m.158 views

📄 Easywork Enterprise 2.1.3.354 Cleartext Memory Secret Storage

Easywork Enterprise version 2.1.3.354 is vulnerable to cleartext storage of sensitive information in memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory...

6.2CVSS6.7AI score0.00101EPSS
SaveExploits1
ICS
ICS
added 2025/10/20 12:30 a.m.17 views

ABB Terra AC

SUMMARY ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which potentially takes remote control of the product and performs a write operation to the flash...

6.8CVSS6.1AI score0.00273EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/10/20 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from memory allocated using kzalloc in the smcrxsplice function being passed to the getpage function, which could...

5.9AI score0.00179EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/10/20 12:00 a.m.7 views

The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the MapUrlToZone method in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

8.5CVSS7.5AI score0.00466EPSS
SaveExploits0References2Affected Software26
BDU FSTEC
BDU FSTEC
added 2025/10/17 12:00 a.m.10 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.00355EPSS
SaveExploits0References2Affected Software4
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.7 views

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to write to out-of-bounds memory...

5.5CVSS7AI score0.00113EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/10 12:00 a.m.8 views

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

7.1CVSS6.7AI score0.00115EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/08 4:32 p.m.8 views

EUVD-2025-33295

Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.4.9.21...

7.4CVSS6.4AI score0.00095EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.8 views

PT-2025-41289

Name of the Vulnerable Software and Affected Versions ABB MConfig versions through 1.4.9.21 Description A security issue exists in ABB MConfig related to the storage of sensitive information in memory in cleartext. Recommendations Update ABB MConfig to a version later than 1.4.9.21...

7.4CVSS5.8AI score0.00095EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/10/08 12:00 a.m.6 views

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS5.8AI score0.00146EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/10/08 12:00 a.m.7 views

The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the Visual Studio source editor arises from allowing operations beyond the buffer boundaries in memory, enabling an attacker to execute arbitrary code.

The vulnerability of the Microsoft .NET software platform, Microsoft .NET Framework, and the source code editor Visual Studio is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS6.4AI score0.00771EPSS
SaveExploits0References3Affected Software5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-7152

Malware in sbrugna...

5.5CVSS5.5AI score0.00322EPSS
SaveExploits0References2
Rows per page
Query Builder