Lucene search
K

2147 matches found

RedhatCVE
RedhatCVE
added 2025/09/11 5:29 p.m.2 views

CVE-2025-55227

Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.6AI score0.00872EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/11 5:29 p.m.1 views

CVE-2025-53805

Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

7.5CVSS6.7AI score0.00934EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/11 12:0 a.m.2 views

SEAT Queue Ticket Kiosk 代码问题漏洞

SEAT Queue Ticket Kiosk is a queue caller from SEAT. A code issue vulnerability exists in SEAT Queue Ticket Kiosk 20250827 and prior versions, which stems from a deserialization issue in the Java RMI Registry Handler component that could lead to a local network attack...

3.1CVSS4.4AI score0.00048EPSS
Exploits0References4
NVD
NVD
added 2025/09/09 5:16 p.m.1 views

CVE-2025-54917

Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

4.3CVSS0.00344EPSS
Exploits0References1
NVD
NVD
added 2025/09/09 5:15 p.m.1 views

CVE-2025-54106

Integer overflow or wraparound in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

8.8CVSS0.00433EPSS
Exploits1References1
OSV
OSV
added 2025/09/09 5:15 p.m.2 views

CVE-2025-53809

Improper input validation in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

6.5CVSS5.8AI score0.01858EPSS
Exploits0References1
OSV
OSV
added 2025/09/09 5:15 p.m.2 views

CVE-2025-53797

Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00469EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/09/09 7:0 a.m.3 views

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Improper input validation in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

6.5CVSS5.4AI score0.01858EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/09/09 7:0 a.m.3 views

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...

8.8CVSS7.7AI score0.00433EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2025/09/09 7:0 a.m.2 views

HTTP.sys Denial of Service Vulnerability

Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

7.5CVSS6.8AI score0.00934EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.1 views

PT-2025-36843

Name of the Vulnerable Software and Affected Versions: Windows SMBv3 Client affected versions not specified Description: A use-after-free issue exists in the Windows SMBv3 Client. This allows an authorized attacker to execute code over a network. The vulnerability enables remote attackers to...

4.8CVSS7.1AI score0.00487EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.1 views

PT-2025-36855

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow exists in the Windows Routing and Remote Access Service RRAS. This issue allows an unauthorized attacker to execute code...

10CVSS7.4AI score0.00344EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.2 views

PT-2025-36882

Name of the Vulnerable Software and Affected Versions Windows NTLM versions prior to the fix included in CVE-2025-54918 Description An improper authentication issue exists within Windows NTLM. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability relates ...

9CVSS8.6AI score0.00916EPSS
Exploits1References24
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.1 views

PT-2025-36848

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: An integer overflow or wraparound in Windows Routing and Remote Access Service RRAS can allow an unauthorized attacker to execute code over a network...

10CVSS7.3AI score0.00433EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.2 views

PT-2025-36832

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: Improper input validation in the Windows Local Security Authority Subsystem Service LSASS can allow an authorized attacker to cause a denial...

6.5CVSS6.1AI score0.01858EPSS
Exploits0References5
OSV
OSV
added 2025/09/05 9:15 p.m.0 views

CVE-2025-53791

Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

4.7CVSS5.8AI score0.00194EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2025/09/05 7:0 a.m.3 views

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

4.7CVSS6.6AI score0.00194EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-1999010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in...

9.8CVSS6.8AI score0.01604EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/23 8:13 p.m.3 views

CVE-2025-55231

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an unauthorized attacker to execute code over a network...

7.5CVSS7.7AI score0.00213EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-3278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: RBR. Supported versions that are affected are 5.6.41 and prior, 5.7.23 and pri...

4.9CVSS5.5AI score0.00128EPSS
Exploits0References2
Rows per page
Query Builder