Lucene search
+L

29027 matches found

Microsoft CVE
Microsoft CVE
added 2025/10/16 1:01 a.m.10 views

drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw

...

5.5CVSS7AI score0.00255EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.13 views

Ilevia EVE X1 Server 安全漏洞

Ilevia EVE X1 Server is a smart home and building automation from Ilevia, Italy. A security vulnerability exists in Ilevia EVE X1 Server version 4.7.18.0.eden and prior versions, which stems from storing passwords using the unsalted MD5 hash algorithm, which could lead to an offline dictionary...

8.2CVSS6.6AI score0.00287EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.13 views

Sergestec Exito 安全漏洞

Sergestec Exito is a sales platform from Sergestec, Inc. A security vulnerability exists in Sergestec Exito version v8.0, which stems from incorrect manipulation of the parameter id in the file /admin/ticketa4.php, which could lead to unsafe direct object references...

7.5CVSS6.6AI score0.0032EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/16 12:00 a.m.7 views

OPENSUSE-SU-2025:15642-1 ruby3.4-rubygem-rack-2.2-2.2.20-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.20-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.1AI score0.00605EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/16 12:00 a.m.9 views

PT-2025-42489

Name of the Vulnerable Software and Affected Versions QuickJS affected versions not specified Description An issue exists in the QuickJS engine related to floating-point arithmetic precision errors within the TypedArray.prototype.indexOf function when a negative fromIndex argument is provided...

6.5CVSS6.1AI score0.00364EPSS
SaveExploits1References11
OSV
OSV
added 2025/10/16 12:00 a.m.5 views

OPENSUSE-SU-2025:15638-1 ansible-core-2.18-2.18.10-2.1 on GA media

These are all security issues fixed in the ansible-core-2.18-2.18.10-2.1 package on the GA media of openSUSE Tumbleweed...

7.8CVSS6.9AI score0.00859EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/16 12:00 a.m.13 views

Sergestec Exito 跨站脚本漏洞

Sergestec Exito is a sales platform from Sergestec, Inc. A cross-site scripting vulnerability exists in Sergestec Exito version v8.0, which stems from insufficient validation of user input for the parameter obs in the file /admin/index.php, which could lead to a stored cross-site scripting attack...

5.4CVSS5.8AI score0.00257EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2025/10/15 9:15 p.m.10 views

CVE-2025-10729 affecting package qtsvg for versions less than 6.6.1-3

CVE-2025-10729 affecting package qtsvg for versions less than 6.6.1-3. A patched version of the package is available...

9.4CVSS6.6AI score0.00204EPSS
SaveExploits0
NVD
NVD
added 2025/10/15 5:16 p.m.14 views

CVE-2025-58133

Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access...

7.5CVSS0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 4:43 p.m.9 views

CVE-2025-37146

A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS7.8AI score0.0083EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/15 12:27 p.m.13 views

WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin ShopMagic versions = 4.5.6...

5.8CVSS6.9AI score0.00289EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/10/15 10:46 a.m.22 views

CVE-2025-55081 Potential out of bound read in _nx_secure_tls_process_clienthello()

In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the nxsecuretlsprocessclienthello function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside o...

6.9CVSS0.00345EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.10 views

CVE-2025-20710

In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418785; Issue ID: MSV-3515...

8.8CVSS7.3AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.10 views

CVE-2025-20718

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581...

7.8CVSS6.7AI score0.00155EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.11 views

CVE-2025-20709

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID:...

8.8CVSS7.3AI score0.00286EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.13 views

CVE-2025-20720

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID:...

8.8CVSS7.3AI score0.00243EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.10 views

CVE-2025-20714

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432659; Issue ID: MSV-390...

7.8CVSS6.7AI score0.00129EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.11 views

CVE-2025-20716

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-372...

7.8CVSS6.7AI score0.00129EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.11 views

CVE-2025-20713

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432661; Issue ID: MSV-390...

7.8CVSS6.7AI score0.00129EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.15 views

CVE-2025-20719

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418955; Issue ID:...

8.8CVSS7.3AI score0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder