Lucene search
+L

6458 matches found

Microsoft CVE
Microsoft CVE
•added 2025/04/23 7:00 a.m.•11 views

Field `file_table` of `struct module *module` is uninitialized

...

5.5CVSS5.3AI score0.0038EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•14 views

The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•16 views

The vulnerability of the ColdFusion software platform, which arises due to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the ColdFusion software platform exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

6.4CVSS5.2AI score0.15506EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•33 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/23 12:00 a.m.•21 views

The vulnerability of the ImportDatabase method in software for managing and monitoring deleted objects in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ImportDatabase method in software for managing and monitoring removed objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS6.7AI score0.00865EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/22 12:00 a.m.•13 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code during the user creation process...

8.7CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/22 12:00 a.m.•16 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/22 12:00 a.m.•14 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2025/04/21 9:14 p.m.•16 views

CLSA-2025-1745270046 libX11: Fix of CVE-2023-3138

CVE-2023-3138: prevent out-of-bounds writes in XQueryExtension responses within Display struct...

7.5CVSS6.9AI score0.01656EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/04/21 4:47 p.m.•17 views

[SECURITY] Fedora 41 Update: rust-litemap-0.7.3-5.fc41

A key-value Map implementation based on a flat, sorted Vec...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/04/18 12:00 a.m.•12 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly initializing clkdata.num, which could lead to out-of-bounds access to arrays...

5.5CVSS6.5AI score0.00278EPSS
SaveExploits0References9
NVD
NVD
•added 2025/04/16 3:15 p.m.•19 views

CVE-2025-22032

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference Address a kernel panic caused by a null pointer dereference in the mt792xrxgetwcid function. The issue arises because the deflink structure is not properly...

5.5CVSS0.00202EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/04/16 2:13 p.m.•43 views

CVE-2025-22122 block: fix adding folio to bio

In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio 4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bioaddfolionofail and IO failure. Fix it by...

0.00186EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/16 2:12 p.m.•123 views

CVE-2025-22078

CVE-2025-22078 affects the Linux kernel staging/vchiq_arm component. The issue occurs when vchiq_platform_conn_state_changed() is never called or fails before driver removal, causing ka_thread to potentially point to an invalid task_struct and risking a crash. The fix adds necessary guards before...

5.5CVSS6.5AI score0.00201EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/04/16 2:11 p.m.•31 views

CVE-2025-22032 wifi: mt76: mt7921: fix kernel panic due to null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference Address a kernel panic caused by a null pointer dereference in the mt792xrxgetwcid function. The issue arises because the deflink structure is not properly...

0.00202EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/04/16 2:11 p.m.•9 views

CVE-2025-22029

Removed by vendor...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•7 views

PT-2025-16709 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the stack layout for constructing arguments for the ftrace return to handler function in the return t...

7AI score0.00212EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•16 views

The vulnerability of the PHP framework Yii, related to the lack of protection for website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the PHP framework Yii is related to the lack of protective measures for the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.4CVSS5.3AI score0.0024EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•18 views

The vulnerability in the structure of const nla_policy nl80211_policy{} in the net/wireless/nl80211.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the const nlapolicy nl80211policy structure in the net/wireless/nl80211.c module of the Linux kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.1CVSS7.2AI score0.00228EPSS
SaveExploits0References20Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•17 views

The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows attackers to carry out attacks using cross-site scripting (XSS).

The vulnerability of the GLPI system’s request, incident, and asset inventory management functions is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers who operate remotely to carry out attacks using cross-site scripting XSS...

7.8CVSS5.2AI score0.0036EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder