Lucene search
+L

5563 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.7 views

The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the Hostname parameter...

4CVSS5AI score0.00374EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.15 views

The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

4CVSS5.1AI score0.0393EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/08 10:11 a.m.59 views

CVE-2025-21453

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...

7.8CVSS7.1AI score0.00089EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/05/07 2:19 a.m.5 views

SUSE CVE-2022-49906

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Free rwi on reset success Free the rwi structure in the event that the last rwi in the list processed successfully. The logic in commit 4f408e1fa6e1 "ibmvnic: retry reset if there are no other resets" introduces an issue...

5.5CVSS6.4AI score0.00174EPSS
SaveExploits0References12
Schneier on Security
Schneier on Security
added 2025/05/06 11:3 a.m.14 views

Fake Student Fraud in Community Colleges

Reporting on the rise of fake students enrolling in community college courses: The bots' goal is to bilk state and federal financial aid money by enrolling in classes, and remaining enrolled in them, long enough for aid disbursements to go out. They often accomplish this by submitting AI-generate...

7.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2025/05/06 9:15 a.m.4 views

CVE-2025-21453

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...

7.8CVSS5.7AI score0.00089EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/05/06 9:15 a.m.5 views

CVE-2024-45565

Memory corruption when blob structure is modified by user-space after kernel verification...

7.8CVSS5.8AI score0.00067EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/06 8:32 a.m.16 views

CVE-2025-21453 Use After Free in GPS HLOS Driver

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...

7.8CVSS7.1AI score0.00089EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/06 8:32 a.m.118 views

CVE-2025-21453

CVE-2025-21453 describes memory corruption in Qualcomm components due to a use-after-free style issue when an iterator is accessed after removal, with the GPS HLOS driver specifically listed in CVE records. Public records (NVD/NCSC/Red Hat CVEs) corroborate the memory-corruption description and t...

7.8CVSS7.9AI score0.00089EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/06 8:32 a.m.80 views

CVE-2025-21453 Use After Free in GPS HLOS Driver

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur...

7.8CVSS0.00089EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.7 views

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets, which stems from the fact that accessing removed iterators while processing a data structure could result in memory corruption...

7.8CVSS6.5AI score0.00089EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:0 a.m.11 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for website structure protection. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.28742EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:0 a.m.8 views

The vulnerability of TP-Link M7200 4G LTE Mobile Wi-Fi Router’s microprogramming software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of TP-Link M7200 4G LTE Mobile Wi-Fi Router’s microprogramming software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted SQL code remotel...

6.5CVSS6.1AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/05/04 2:12 a.m.5 views

SUSE CVE-2022-49852

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage threadstruct's s12 may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s12 array in threadstruct when fork. A...

7.1CVSS6.4AI score0.00181EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/05/02 3:55 p.m.33 views

CVE-2023-53119 nfc: pn533: initialize struct pn533_out_arg properly

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533outcomplete...

0.00176EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/05/02 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the pn533 driver not properly initializing the outarg structure, which could result in a null pointer...

5.5CVSS6.4AI score0.00176EPSS
SaveExploits0References8
OSV
OSV
added 2025/05/01 3:16 p.m.4 views

DEBIAN-CVE-2022-49852

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage threadstruct's s12 may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s12 array in threadstruct when fork. A...

7.1CVSS5.5AI score0.00181EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/01 3:16 p.m.9 views

UBUNTU-CVE-2022-49840

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of aarch64 alignment fault if KFENCE enabled. When the size from user bpf program is an odd number, like 399, 407, etc, it will cause the...

7.8CVSS6.1AI score0.00197EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2025/05/01 2:10 p.m.17 views

CVE-2022-49906 ibmvnic: Free rwi on reset success

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Free rwi on reset success Free the rwi structure in the event that the last rwi in the list processed successfully. The logic in commit 4f408e1fa6e1 "ibmvnic: retry reset if there are no other resets" introduces an issue...

0.00174EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/01 2:10 p.m.102 views

CVE-2022-49906

The CVE-2022-49906 issue affects the Linux kernel ibmvnic driver: a path in the reset handling could leak 32 bytes by not freeing the rwi structure when the last rwi in the list is processed. A fix releases the rwi memory on reset success (kernel patch 4f408e1fa6e1 and related commits). Connected...

5.5CVSS6.5AI score0.00174EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder