Lucene search
+L

9410 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-0938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosur...

5.5CVSS5.6AI score0.00155EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-0433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In blkmqqueuetagbusyiter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no...

7.8CVSS6.5AI score0.00151EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-2182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local...

7.8CVSS7.7AI score0.00217EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-0935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ip6xmit of ip6output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System executi...

7.2CVSS7.3AI score0.00198EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-20572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation ...

6.7CVSS6.2AI score0.00488EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2019-9455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Android kernel in the video driver there is a kernel pointer leak due to a WARNON statement. This could lead to local information disclosure with System...

2.3CVSS6.5AI score0.00176EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-39657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ufshcdehdeviceresethandler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure...

4.4CVSS6.5AI score0.00154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-2213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In binderfreetransaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no...

7.4CVSS7.6AI score0.00146EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/05 5:15 p.m.6 views

CVE-2025-54253

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user...

10CVSS6.1AI score0.87989EPSS
SaveExploits7References3
OSV
OSV
added 2025/08/05 5:15 p.m.7 views

CVE-2025-54254

Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the local file system, scope i...

8.6CVSS5.9AI score0.77192EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2025/08/05 4:53 p.m.14 views

CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user...

10CVSS8.5AI score0.87989EPSS
SaveExploits7References1
CVE
CVE
added 2025/08/05 4:53 p.m.58 views

CVE-2025-54254

CVE-2025-54254 affects Adobe Experience Manager, specifically versions 6.5.23 and earlier, due to an XML External Entity (XXE) handling flaw that can cause arbitrary file system reads. The issue arises from improper restriction of XML entities, enabling an attacker to read local files without use...

8.6CVSS7.5AI score0.77192EPSS
SaveIn wildExploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/04 6:20 a.m.4 views

CVE-2025-20702

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.6AI score0.11248EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/04 6:20 a.m.191 views

CVE-2025-20702

CVE-2025-20702 affects the Airoha Bluetooth audio SDK, enabling unauthorized access to the RACE protocol with remote privilege escalation, no user interaction required, and proximity-based exploitation. Affected details and root cause are described across multiple sources (Red Hat, NVD, NIST CVE ...

8.8CVSS7.9AI score0.11248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/04 6:19 a.m.22 views

CVE-2025-20700

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

0.09008EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/04 2:15 a.m.15 views

CVE-2025-20698

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915400; Issue ID: MSV-3793...

6.7CVSS5.8AI score0.0009EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/04 1:49 a.m.38 views

CVE-2025-20698

CVE-2025-20698 affects Power HAL and describes an out-of-bounds write caused by a missing bounds check. The impact is local escalation of privilege to System level without user interaction. The vulnerability details indicate the presence of a patch (ALPS09915400) and a tracked Issue ID (MSV-3793)...

6.7CVSS6.7AI score0.0009EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/08/04 1:49 a.m.7 views

CVE-2025-20698

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915400; Issue ID: MSV-3793...

6.7CVSS5.4AI score0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/04 1:49 a.m.9 views

CVE-2025-20698

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915400; Issue ID: MSV-3793...

7.3AI score0.0009EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/04 1:49 a.m.7 views

CVE-2025-20697

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795...

6.7CVSS5.4AI score0.0009EPSS
SaveExploits0References2
Rows per page
Query Builder