Lucene search
+L

4480 matches found

CNNVD
CNNVD
added 2025/05/18 12:00 a.m.11 views

Code-Projects Police Station Management System 安全漏洞

Code-Projects Police Station Management System is an open source police station management system from Code-Projects. A security vulnerability exists in Code-Projects Police Station Management System version 1.0, which is caused by a stack buffer overflow due to an incorrect manipulation of the...

7.8CVSS5.7AI score0.00341EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/05/18 12:00 a.m.11 views

PT-2025-21859 · Code Projects · Code-Projects Police Station Management System

Name of the Vulnerable Software and Affected Versions: code-projects Police Station Management System version 1.0 Description: A critical issue was found in the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer...

7.8CVSS5.2AI score0.00339EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/05/18 12:00 a.m.8 views

Code-Projects Police Station Management System 安全漏洞

Code-Projects Police Station Management System is an open source police station management system from Code-Projects. A security vulnerability exists in Code-Projects Police Station Management System version 1.0, which is caused by a buffer overflow due to incorrect manipulation of parameter N in...

7.8CVSS5.7AI score0.00339EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.7 views

kernel: wifi: iwlwifi: mvm: avoid NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference iwlmvmtxskbsta and iwlmvmtxmpdu verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwlmvmstafrommac80211, which is dereferencing the ieee80211sta pointe...

5.5CVSS6.4AI score0.00238EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/09 12:28 a.m.20 views

CVE-2025-47423

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext...

5.8CVSS7.2AI score0.01996EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/07 6:15 p.m.24 views

CVE-2025-47423

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext...

5.8CVSS0.01996EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/07 3:06 a.m.25 views

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

7.5CVSS7.3AI score0.00797EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.20 views

Personal Weather Station Dashboard 安全漏洞

Personal Weather Station Dashboard PWSDashboard is a data-rich weather dashboard from the PWSDashboard open source. A security vulnerability exists in Personal Weather Station Dashboard, which stems from a directory traversal vulnerability in /test.php that could lead to reading arbitrary files...

5.8CVSS9AI score0.01996EPSS
SaveExploits1References3
CVE
CVE
added 2025/05/07 12:00 a.m.127 views

CVE-2025-47423

CVE-2025-47423 affects Personal Weather Station Dashboard (12_lts). A directory traversal fault in /others/_test.php (test parameter) allows unauthenticated remote readers to access arbitrary files, including server private keys. Root cause: insufficient sanitization of the test parameter enablin...

5.8CVSS5.8AI score0.01996EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/05/07 12:00 a.m.31 views

CVE-2025-47423

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext...

5.8CVSS0.01996EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.14 views

PT-2025-20287 · Unknown · Pws Personal Weather Station Dashboard

Name of the Vulnerable Software and Affected Versions: Personal Weather Station Dashboard version 12 lts Description: The issue allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to "/others/ test.php". This can be exploited to read...

5.8CVSS9.2AI score0.01996EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2025/05/07 12:00 a.m.13 views

CVE-2025-47423

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext...

5.8CVSS5.8AI score0.01996EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/05/06 12:00 a.m.8 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a temporary denial of service that may result when parsing per-STA configuration files...

7.5CVSS6.5AI score0.0033EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/05 3:15 a.m.36 views

CVE-2025-20667

In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

7.5CVSS0.00433EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/05 2:49 a.m.10 views

CVE-2025-20670

In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with User execution privileges needed. User interaction is needed for exploitation...

5.6AI score0.00317EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/05 2:49 a.m.12 views

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

7.5AI score0.00797EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/05 2:49 a.m.136 views

CVE-2025-20666

CVE-2025-20666 affects MediaTek’s Modem component. The issue is an uncaught exception in Modem that can crash the system, enabling remote denial-of-service when a UE connects to a rogue base station; no user interaction or additional privileges are required. Patch MOLY00650610 (Issue MSV-2933) is...

7.5CVSS6.7AI score0.00797EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/05 2:49 a.m.44 views

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

0.00797EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/05 12:00 a.m.24 views

PT-2025-19333 · Huawei · Huawei Modem

Name of the Vulnerable Software and Affected Versions: Huawei Modem affected versions not specified Description: The issue is related to a possible permission bypass due to improper certificate validation in the Modem. This could lead to remote information disclosure if a UE has connected to a...

5.7CVSS6.1AI score0.00317EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/05/05 12:00 a.m.10 views

PT-2025-19330 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker,...

7.5CVSS6.4AI score0.00797EPSS
SaveExploits0References15
Rows per page
Query Builder