Lucene search
+L

26780 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 4:12 p.m.•8 views

CVE-2020-1203

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to properly handle objects in memory, aka 'Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1202...

7.8CVSS7.1AI score0.00928EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:09 p.m.•17 views

CVE-2020-11299

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

10CVSS7.5AI score0.01093EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:42 p.m.•11 views

CVE-2020-8357

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations...

5.5CVSS6.8AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:24 p.m.•15 views

CVE-2020-27174

In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input. This can result in a memory leak on the microVM emulation thread, possibly occupying more memory than intended on the host...

7.5CVSS7.1AI score0.01741EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 3:08 p.m.•10 views

CVE-2020-0216

In phNciNfcRecvMfResp of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score0.00196EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:25 a.m.•17 views

CVE-2019-10593

Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009...

10CVSS7.5AI score0.00902EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:41 a.m.•14 views

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

9.8CVSS6.9AI score0.01032EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:28 a.m.•12 views

CVE-2019-14765

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

8.8CVSS6.8AI score0.0114EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:49 a.m.•15 views

CVE-2019-10587

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

10CVSS7.5AI score0.00902EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:42 a.m.•7 views

CVE-2017-17878

An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES aka the CONFIGFEATUREDEFAULTPASSWDALGO="des" setting...

10CVSS7AI score0.016EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:30 a.m.•8 views

CVE-2016-11043

An issue was discovered on Samsung mobile devices with M6.0 software. The S/MIME implementation in EAS uses DES where 3DES is intended. The Samsung ID is SVE-2016-5871 June 2016...

7.5CVSS7AI score0.00218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:16 a.m.•17 views

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

8.2CVSS7.3AI score0.01231EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:02 a.m.•17 views

CVE-2018-9426

In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin...

7.5CVSS6.9AI score0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:37 a.m.•12 views

CVE-2017-1000465

Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code...

5.4CVSS6.1AI score0.00758EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/05/22 12:00 a.m.•8 views

Dynamic Encryption-Based Cloud Security Model Using Facial Image and Password-Based Key Generation for Multimedia Data

In this cloud-dependent era, various security techniques, such as encryption, steganography, and hybrid approaches, have been utilized in cloud computing to enhance security, maintain enormous storage capacity, and provide ease of access. However, the absence of data type-specific encryption and...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/21 8:56 p.m.•10 views

CVE-2005-2223

Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service crash during authentication...

5CVSS7AI score0.50805EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 7:30 p.m.•15 views

CVE-2005-0576

Unknown vulnerability in Standard Type Services Framework STSF Font Server Daemon stfontserverd in Solaris 9 allows local users to modify or delete arbitrary files...

3.6CVSS6.8AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 6:35 p.m.•11 views

CVE-2009-0431

SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter...

7.5CVSS8.8AI score0.01836EPSS
SaveExploits2References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/21 2:55 p.m.•13 views

Security Bulletin: There is a Denial of Service vulnerability due to Apache CXF in IBM WebSphere Liberty that is shipped with IBM CICS TX Standard (CVE-2025-23184).

Summary There is a Denial of Service vulnerability due to Apache CXF in IBM WebSphere Liberty that is shipped with IBM CICS TX Standard CVE-2025-23184. An update to IBM CICS TX Standard has been released to address this vulnerability. Vulnerability Details CVEID:CVE-2025-23184 DESCRIPTION: A...

7.5CVSS7.3AI score0.02134EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/05/19 4:15 p.m.•5 views

CVE-2025-4876

ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering. This key is embedded in plaintext within the binary and used in cryptographic operations without dynamic key management. Once obtained t...

4.4CVSS5.8AI score0.00102EPSS
SaveExploits1References1
Rows per page
Query Builder