Lucene search
+L

6693 matches found

OSV
OSV
added 2025/10/15 8:15 a.m.4 views

UBUNTU-CVE-2025-39991

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11kqmim3load If ab-fw.m3data points to data, then fw pointer remains null. Further, if m3mem is not allocated, then fw is dereferenced to be passed to ath11kerr function. Replace fw-size b...

5.7AI score0.00187EPSS
SaveExploits0References17
AstraLinux
AstraLinux
added 2025/10/14 6:5 p.m.3 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: riscv: cpuopssbi: Use static array for bootdata Since commit 6b9f29b81b15 "riscv: Enable pcpu page first chunk allocator", if NUMA is enabled, the page percpu allocator may be used on very sparse configurations, or when requested...

6.2AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/14 4:15 p.m.8 views

CVE-2025-54822

An improper authorization vulnerability CWE-285 vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an...

4.3CVSS5.8AI score0.00296EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 3:23 p.m.2 views

CVE-2025-54822

An improper authorization vulnerability CWE-285 vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an...

4.3CVSS6AI score0.00296EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 3:23 p.m.26 views

CVE-2025-54822

Fortinet CVE-2025-54822 affects FortiOS 7.4.0–7.4.1, 7.2.0–7.2.8, 7.0.0–7.0.11; FortiProxy 7.4.0–7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions. Description: authenticated attackers can access static files of other VDOMs via crafted HTTP/HTTPS request...

4.3CVSS6AI score0.00296EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/10/14 3:23 p.m.3 views

CVE-2025-54822

An improper authorization vulnerability CWE-285 vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an...

4.3CVSS5.6AI score0.00296EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.7 views

Fortinet Fortigate Improper autorization over static files (FG-IR-25-684)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-684 advisory. - An improper authorization vulnerability CWE-285 in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.8 & Fortinet...

4.3CVSS5.6AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.6 views

PT-2025-41958

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.4.0 through 7.4.1 and versions prior to 7.2.8 Fortinet FortiProxy versions prior to 7.4.8 Description An improper authorization issue exists that allows an authenticated attacker to access static files of other...

4.3CVSS6.5AI score0.00296EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.11 views

Fortinet FortiOS和Fortinet FortiProxy 授权问题漏洞

Fortinet FortiOS is a network operating system developed by Fortinet for use in its firewall and network security appliances. A security vulnerability exists in Fortinet FortiOS that stems from a flaw in the authorization mechanism. An attacker could exploit the vulnerability to access static fil...

4.3CVSS6.7AI score0.00296EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/10/13 12:0 a.m.5 views

Tenda AC23 sscanf function buffer overflow vulnerability

Tenda AC23 is a dual-band wireless router from Tenda that supports 802.11acWave2 technology with dual-band concurrent transmission rates up to 2033Mbps, including up to 1733Mbps in the 5GHz band, which is suitable for high-bandwidth applications such as 4K video and online live streaming. Tenda...

9CVSS8.3AI score0.00742EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/08 7:21 a.m.8 views

CVE-2025-11356

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and coul...

9CVSS7.4AI score0.00742EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-11149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of the package node-static; all versions of the package @nubosoftware/node- static. The package fails to catch an exception when user...

7.5CVSS5.8AI score0.00489EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/07 4:15 p.m.7 views

UBUNTU-CVE-2023-53661

In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxtgetnvramdirectory The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplicati...

5.5CVSS6.2AI score0.00145EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 9:30 a.m.8 views

EUVD-2025-32699

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and coul...

9CVSS6.8AI score0.00742EPSS
SaveExploits1References6
CVE
CVE
added 2025/10/07 7:2 a.m.25 views

CVE-2025-11356

CVE-2025-11356 affects Tenda AC23 (pre-16.03.07.52). The vulnerability is in sscanf within /goform/SetStaticRouteCfg, where input length validation allows a buffer overflow, enabling remote exploitation. Public exploits exist. Remedies include upgrading to a version newer than 16.03.07.52 (per PT...

9CVSS8.7AI score0.00742EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-4439

Malware in sbrugna...

7.5CVSS6.4AI score0.01524EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-1294

Malware in sbrugna...

8.5CVSS8.4AI score0.01451EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-19025

Malware in sbrugna...

9.1CVSS9.3AI score0.0133EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-1220

Malware in sbrugna...

7.5CVSS7.6AI score0.02005EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-18607

Malware in sbrugna...

4.7CVSS5.3AI score0.00274EPSS
SaveExploits0References3
Rows per page
Query Builder