Lucene search
K

54 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-32340

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00887EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-42973

Malicious code in bioql PyPI...

7.2CVSS9.2AI score0.01158EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-49123

Malicious code in bioql PyPI...

8.8CVSS7.6AI score0.00917EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/19 12:0 a.m.2 views

PT-2025-44378

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc6 Description The Linux kernel contains a flaw in the hfsplus strcasecmp function that can lead to a slab-out-of-bounds read. The issue is related to the logic within hfsplus strcasecmp. This can result ...

4.5CVSS5.8AI score0.00175EPSS
Exploits0
Fedora
Fedora
added 2025/07/27 1:23 a.m.7 views

[SECURITY] Fedora 42 Update: glibc-2.41-9.fc42

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

5.9CVSS7.3AI score0.00151EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/05/22 12:0 a.m.5 views

PT-2025-29016

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.15.0-rc7 and earlier Description: The platform profile driver in the Linux kernel is loaded even on platforms without ACPI enabled. The initialization of sysfs entries was moved to the module init call, requiring acpi...

7.8CVSS7.9AI score0.01345EPSS
Exploits8References569
Redos
Redos
added 2025/02/12 12:0 a.m.93 views

ROS-20250212-05

Vulnerability in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to incorrect limitation of operations within the memory buffer. with incorrect limitation of operations within the memory buffer. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS9.3AI score0.00977EPSS
Exploits0
Cvelist
Cvelist
added 2024/07/30 2:35 p.m.21 views

CVE-2024-4188 Security vulnerability exists in Documentum server cloud releases that could allow access to sensitive information which can impact system Operation.

Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This issue affects Documentum™ Server: from 16.7 through 23.4...

7.1CVSS0.00154EPSS
Exploits0References1
OSV
OSV
added 2023/09/07 8:15 a.m.2 views

CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

7.2CVSS6AI score0.01158EPSS
Exploits0References1
NVD
NVD
added 2023/09/07 8:15 a.m.12 views

CVE-2023-39240

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

7.2CVSS7.1AI score0.01158EPSS
Exploits0References1
Prion
Prion
added 2023/09/07 8:15 a.m.24 views

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote...

7.5CVSS9.6AI score0.01158EPSS
Exploits0References1Affected Software3
Prion
Prion
added 2023/09/07 8:15 a.m.31 views

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code...

7.5CVSS9.6AI score0.01187EPSS
Exploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2023/09/07 7:18 a.m.15 views

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

7.2CVSS7.5AI score0.01158EPSS
Exploits0References1
CVE
CVE
added 2023/09/07 7:18 a.m.2526 views

CVE-2023-39239

The CVE-2023-39239 entry concerns an authenticated/remote (sources vary on privilege) format string vulnerability in the General function API (apply.cgi) of ASUS RT-AX56U V2. The flaw arises from lack of input validation for a specific value in apply.cgi, enabling remote code execution or disrupt...

7.2CVSS7.3AI score0.01158EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/07 7:10 a.m.14 views

CVE-2023-39238 ASUS RT-AX55、RT-AX56U_V2 - Format String - 1

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution,...

7.2CVSS7.3AI score0.01187EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/09/07 7:10 a.m.14 views

CVE-2023-39238 ASUS RT-AX55、RT-AX56U_V2 - Format String - 1

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution,...

7.2CVSS7.5AI score0.01187EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/21 7:11 a.m.20 views

CVE-2023-35087 ASUS RT-AX56U V2 & RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cmprocessChangedConfigMsg in ccmprocessREQCHANGEDCONFIG function in AiMesh system. An unauthenticated remote attacker can exploit thi...

9.8CVSS9.8AI score0.0089EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/21 6:32 a.m.22 views

CVE-2023-35086 ASUS RT-AX56U V2 & RT-AC86U - Format String -1

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessagenormal function, in the dodetwancgi module of httpd. A remote attacker with administrator privilege can exploit...

7.2CVSS7.3AI score0.39705EPSS
Exploits1References1
NVD
NVD
added 2023/06/02 11:15 a.m.11 views

CVE-2023-30604

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

9.8CVSS9.5AI score0.00926EPSS
Exploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.7 views

CVE-2023-28698

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...

9.8CVSS9.8AI score0.00848EPSS
Exploits0References1
Rows per page
Query Builder