Lucene search
+L

8388 matches found

Vulnrichment
Vulnrichment
added 2025/09/24 3:33 p.m.4 views

CVE-2025-47329 Release of Invalid Pointer or Reference in Android Core

Memory corruption while handling invalid inputs in application info setup...

7.8CVSS6.7AI score0.00081EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/24 3:33 p.m.27 views

CVE-2025-47329

CVE-2025-47329 describes memory corruption while handling invalid inputs in Android Core during application info setup. According to connected sources, the CVE’s impact is rated HIGH (confidentiality, integrity, and availability), with LOCAL attack vector, LOW privileges required, and NONE user i...

7.8CVSS6.7AI score0.00081EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/24 12:0 a.m.10 views

PT-2025-39298

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL affected versions not specified Description A flaw exists in the Day One setup process that may allow a remote, unauthenticated attacker to access the...

5.3CVSS6.2AI score0.00185EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.7 views

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is a network operating system from Cisco USA. A security vulnerability exists in Cisco IOS XE Software that stems from an incomplete cleanup of the Day One setup process, which could allow an unauthenticated remote attacker to access the PKI server...

5.3CVSS6.6AI score0.00185EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2025/09/24 12:0 a.m.12 views

Linux Kernel ksmbd smb2_sess_setup Preauth_HashValue Race Condition Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the PreauthHashValue field. The issue results from the lack of proper locking...

8.5CVSS7.6AI score0.00422EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/24 12:0 a.m.11 views

PT-2025-39285

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47329 Description A memory corruption issue exists when processing invalid inputs during application info setup. This can potentially lead to unexpected behavior or system compromise. Recommendations At the moment, there...

7.8CVSS6.5AI score0.00081EPSS
SaveExploits0References4
NVD
NVD
added 2025/09/23 6:15 a.m.14 views

CVE-2025-39870

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...

7.8CVSS0.00144EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/09/23 6:0 a.m.8 views

CVE-2025-39870

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...

7.8CVSS6.1AI score0.00144EPSS
SaveExploits0
OSV
OSV
added 2025/09/23 6:0 a.m.15 views

CVE-2025-39870 dmaengine: idxd: Fix double free in idxd_setup_wqs()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...

6.2AI score
SaveExploits0References9
Cvelist
Cvelist
added 2025/09/23 6:0 a.m.16 views

CVE-2025-39870 dmaengine: idxd: Fix double free in idxd_setup_wqs()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxdsetupwqs The clean up in idxdsetupwqs has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are: 1 If...

0.00144EPSS
SaveExploits0References5
CVE
CVE
added 2025/09/23 6:0 a.m.47 views

CVE-2025-39869

CVE-2025-39869: Linux kernel memory allocation bug in dmaengine: ti: edma caused out-of-bounds writes to queue_priority_map due to allocating with sizeof(s8) for a 2D array; manifested as kernel crashes on ARM (BeagleBoard-X15). The issue is fixed by changing the allocation to sizeof(*queue_prior...

8.4CVSS6.2AI score0.00149EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/23 12:0 a.m.21 views

PT-2025-40817

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A buffer overflow issue exists in Belkin F9K1015 version 1.00.10. The issue is related to the manipulation of the webpage argument within the file /goform/formWlanSetupWPS. This can be exploited...

9CVSS8.8AI score0.00996EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2025/09/23 12:0 a.m.11 views

PT-2025-40810

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A buffer overflow issue exists in Belkin F9K1015 version 1.00.10. The issue is related to the manipulation of the L2TPUserName argument within the file /goform/formL2TPSetup. This allows for remote co...

9CVSS9.2AI score0.01204EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2025/09/23 12:0 a.m.14 views

PT-2025-40812

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A buffer overflow issue exists in the file /goform/formPPTPSetup. Manipulation of the pptpUserName argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly...

9CVSS9AI score0.01002EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release issue in the idxdsetupwqs function, which could lead to memory corruption...

7.8CVSS5.9AI score0.00144EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/09/22 11:42 p.m.9 views

SUSE CVE-2022-50284

In the Linux kernel, the following vulnerability has been resolved: ipc: fix memory leak in initmqueuefs When setupmqsysctls failed in initmqueuefs, mqueueinodecachep is not released. In order to fix this issue, the release path is reordered...

5.5CVSS7.6AI score0.00143EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2025/09/20 1:3 a.m.9 views

dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup

...

4.7CVSS7AI score0.00191EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/09/20 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-53276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubifs: Free memory for tmpfile name When opening a ubifs tmpfile on an encrypted directory, function fscryptsetupfilename allocates memory for the name that is ...

5.5CVSS5.5AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/19 7:15 p.m.9 views

CVE-2022-4980

General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...

9.3CVSS0.00813EPSS
SaveExploits0References6
Wiz blog
Wiz blog
added 2025/09/19 12:0 p.m.7 views

Beyond CVEs: The Exploitation of Everyday Misconfigurations

Exploring how simple setup flaws become open doors for attackers—and what teams can do to shut them...

6.9AI score
SaveExploits0
Rows per page
Query Builder