Lucene search
K

2173 matches found

OSV
OSV
added 2025/08/12 6:15 p.m.0 views

CVE-2025-50164

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

8CVSS6.2AI score0.00876EPSS
Exploits0References1
OSV
OSV
added 2025/08/12 6:15 p.m.0 views

CVE-2025-24999

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.01295EPSS
Exploits2References1
CVE
CVE
added 2025/08/12 5:10 p.m.27 views

CVE-2025-53144

CVE-2025-53144 is a Windows Message Queuing (MSMQ) remote code execution vulnerability caused by a type confusion flaw in MSMQ. The issue allows an attacker to execute code over the network on a affected Windows host when MSMQ is reachable; CVSSv3.1 indicates AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H w...

8.8CVSS7.5AI score0.22842EPSS
Exploits0References1Affected Software15
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.3 views

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

6.5CVSS5.4AI score0.04637EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.1 views

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

8CVSS8.2AI score0.00669EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/08/12 7:0 a.m.2 views

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Message Queuing allows an authorized attacker to execute code over a network...

8.8CVSS7.6AI score0.17108EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.2 views

PT-2025-32800

Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: A race condition exists due to improper synchronization when using shared resources within the Windows Win32K - GRFX component. This allows an authorized attacker to elevate...

9CVSS6.2AI score0.00653EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.1 views

PT-2025-32771 · Microsoft · Windows Nt Rras +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow exists in Windows Routing and Remote Access Service RRAS. This issue allows an unauthorized attacker to execute code over...

10CVSS7.5AI score0.01131EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-21536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and pri...

4.9CVSS6AI score0.00108EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.1 views

PT-2025-32742 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper validation of syntactic correctness of input allows an unauthorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

5.3CVSS5.8AI score0.02998EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.1 views

PT-2025-32759 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The software contains an improper neutralization of special elements used in an SQL command, leading to a potential SQL injection issue. This allows an authorized attacker to elevate...

9CVSS7.8AI score0.03755EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.2 views

PT-2025-32795 · Microsoft · Windows Directx +1

Name of the Vulnerable Software and Affected Versions: Windows DirectX affected versions not specified Description: Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network. Recommendations: At the moment, there is no...

6.8CVSS6.9AI score0.35348EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-21423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.28 and prior. Easily exploitable...

4CVSS5.2AI score0.00225EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-2020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily...

6.8CVSS6.2AI score0.01766EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-21462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily...

4.9CVSS5.4AI score0.00218EPSS
Exploits0References2
NVD
NVD
added 2025/08/08 4:15 p.m.3 views

CVE-2025-52586

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

7.5CVSS0.00023EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/08/08 4:0 p.m.6 views

CVE-2025-52586 EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

7.5CVSS0.00023EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-21238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.39 and prior, 8.4.1 an...

5.3CVSS6.2AI score0.00323EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-30682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and...

6.5CVSS5.9AI score0.00057EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2021-35635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily...

4.9CVSS5.4AI score0.00311EPSS
Exploits0References2
Rows per page
Query Builder