Lucene search
+L

7271 matches found

CVE
CVE
added 2025/12/09 5:55 p.m.25 views

CVE-2025-62550

The CVE-2025-62550 entry concerns Microsoft Azure Monitor Agent. Affected component: Azure Monitor Agent; vulnerability type: out-of-bounds write that enables remote code execution when exploited over a network by an authorized attacker. A connected Nessus plugin notes versions prior to 1.35.9 ar...

8.8CVSS7AI score0.00726EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/12/09 4:17 p.m.8 views

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

6.7CVSS5.7AI score0.00153EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.9 views

CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...

6.5CVSS5.7AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:17 p.m.7 views

CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...

7.1CVSS0.00379EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:17 p.m.7 views

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

8.4CVSS0.00153EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.3 views

DEBIAN-CVE-2023-53828

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

7.8CVSS5.2AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:17 p.m.8 views

CVE-2023-53828

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

7.8CVSS0.00191EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/09 4:17 p.m.5 views

UBUNTU-CVE-2023-53828

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

7.8CVSS5.7AI score0.00191EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/09 2:7 p.m.8 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses form-data-4.0.0.tgz, form-data-4.0.1.tgz, form-data-4.0.3.tgz which are vulnerable to CVE-2025-7783.

Summary IBM Maximo Application Suite - Monitor Component uses form-data-4.0.0.tgz, form-data-4.0.1.tgz, form-data-4.0.3.tgz which are vulnerable to CVE-2025-7783. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of...

9.4CVSS6.7AI score0.01735EPSS
SaveExploits1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/09 10:44 a.m.7 views

CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...

7.1CVSS6.3AI score0.00379EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 10:44 a.m.19 views

CVE-2025-40831

SINEC Security Monitor prior to V4.10.0 is affected by an input validation flaw in the date parameter of the report generation function. This could allow an authenticated, low-priv attacker to cause a denial-of-service condition in the report feature. Mitigation: upgrade to V4.10.0 or later (per ...

7.1CVSS6.3AI score0.00379EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/09 10:44 a.m.48 views

CVE-2025-40831

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...

7.1CVSS0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 10:44 a.m.4 views

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

8.4CVSS6.2AI score0.00153EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 10:44 a.m.16 views

CVE-2025-40830

CVE-2025-40830 affects Siemens SINEC Security Monitor before version 4.10.0. The issue is missing authorization checks for the file_transfer feature in ssmctl-client, enabling an authenticated, low-priv local attacker to read or write arbitrary files on the server or sensor. Mitigation: upgrade t...

8.4CVSS6.2AI score0.00153EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/09 10:44 a.m.28 views

CVE-2025-40830

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

8.4CVSS0.00153EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/12/09 8:0 a.m.10 views

Azure Monitor Agent Remote Code Execution Vulnerability

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network...

8.8CVSS7.4AI score0.00726EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/09 8:0 a.m.12 views

Windows Camera Frame Server Monitor Information Disclosure Vulnerability

Improper access control in Windows Camera Frame Server Monitor allows an authorized attacker to disclose information locally...

7.1CVSS6.5AI score0.00395EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/12/09 1:29 a.m.8 views

CVE-2023-53828

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

7.8CVSS5.2AI score0.00191EPSS
SaveExploits0
CVE
CVE
added 2025/12/09 1:29 a.m.23 views

CVE-2023-53828

CVE-2023-53828 affects the Linux kernel Bluetooth subsystem (net/bluetooth/hci_core.c) where hci_add_adv_monitor() triggers a use-after-free via a path through msft_add_monitor_pattern(), msft_add_monitor_sync(), and msft_le_monitor_advertisement_cb() in error handling. KSAN reported the use-afte...

7.8CVSS6.2AI score0.00191EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/09 1:29 a.m.6 views

CVE-2023-53828 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports use-after-free in hciaddadvmonitor. While adding an adv monitor, hciaddadvmonitor calls - msftaddmonitorpattern calls - msftaddmonitorsync calls -...

7.8CVSS6.5AI score
SaveExploits0References7
Rows per page
Query Builder