Lucene search
+L

2873 matches found

Vulnrichment
Vulnrichment
•added 2025/02/10 3:38 p.m.•21 views

CVE-2025-24031 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

5.1CVSS4.5AI score0.00143EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/02/10 3:38 p.m.•35 views

CVE-2025-24031 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN

PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, pamgetpwd will never initialize the password...

5.1CVSS0.00143EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/10 12:00 a.m.•13 views

PT-2025-6067

Name of the Vulnerable Software and Affected Versions PAM-PKCS11 versions 0.6.12 and prior Description The issue affects a Linux-PAM login module that allows X.509 certificate-based user login. When a user presses ctrl-c/ctrl-d while being asked for a PIN, the pam pkcs11 module segfaults...

9.2CVSS8.1AI score0.00712EPSS
SaveExploits0References25
Snyk
Snyk
•added 2025/02/06 5:10 p.m.•7 views

Access of Uninitialized Pointer

Overview Affected versions of this package are vulnerable to Access of Uninitialized Pointer in the AMF3CDAddProp function in amf.c which allows attackers to trigger an exploitable crash. Remediation There is no fixed version for rudloff/rtmpdump-bin. References - Talos Vulnerability Report -...

9.8CVSS6.9AI score0.05923EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/02/06 5:10 p.m.•12 views

Access of Uninitialized Pointer

Overview Affected versions of this package are vulnerable to Access of Uninitialized Pointer in the AMF3ReadString function in amf.c. Remediation There is no fixed version for rudloff/rtmpdump-bin. References - Talos Vulnerability Report - Vulnerable Code Credit: Dave McDaniel...

8.7CVSS6.9AI score0.03155EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/02/06 1:48 a.m.•29 views

CVE-2022-43606

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connectionmanagemententry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a seri...

7.5CVSS6.6AI score0.08047EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:20 a.m.•18 views

CVE-2024-24925

A vulnerability has been identified in Simcenter Femap All versions V2306.0000. The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current...

7.8CVSS6.9AI score0.0031EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:49 p.m.•24 views

CVE-2024-26004

An unauthenticated remote attacker can DoS a control agent due to access of a uninitialized pointer which may prevent or disrupt the charging functionality...

7.5CVSS7.1AI score0.01EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/01/29 8:00 a.m.•7 views

btrfs: fix uninitialized pointer free on read_alloc_one_name() error

...

7.8CVSS7AI score0.00214EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/01/29 8:00 a.m.•9 views

btrfs: fix uninitialized pointer free in add_inode_ref()

...

7.8CVSS7.7AI score0.00214EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•10 views

PT-2025-10872 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2024 affected versions not specified Description: The issue is related to an access of uninitialized...

7.8CVSS7.5AI score0.00447EPSS
SaveExploits0References17
NVD
NVD
•added 2025/01/21 11:15 p.m.•17 views

CVE-2024-24443

An uninitialized pointer dereference in the ngaphandlepdusessionresourcesetupresponse routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted PDU Session Resource Setup Response...

6.5CVSS0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/21 12:00 a.m.•6 views

CVE-2024-24443

An uninitialized pointer dereference in the ngaphandlepdusessionresourcesetupresponse routine of OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS via a crafted PDU Session Resource Setup Response...

6.3AI score0.00311EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/01/21 12:00 a.m.•16 views

The vulnerability of the ocfs2_file_read_iter() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ocfs2filereaditer function in the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.1CVSS6.7AI score0.00237EPSS
SaveExploits0References28Affected Software5
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•15 views

PT-2025-2382

Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF oai-cn5g-amf versions up to v2.0.0 Description: The issue is caused by an uninitialized pointer dereference in the ngap handle pdu session resource setup response routine. This allows attackers to cause a Denial of...

6.5CVSS5.9AI score0.00311EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/21 12:00 a.m.•1 views

CVE-2024-57943: Access of Uninitialized Pointer

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before writing Before writing, if a bufferhead marked as new, its data must be zeroed, otherwise uninitialized data in the page cache will be written. So this commit uses foliozeronewbuffe...

7.8CVSS6AI score0.00196EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/01/15 12:00 a.m.•18 views

Microsoft Office Word DOCX File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

7.8CVSS6.7AI score0.00755EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•2 views

PT-2025-1241

Name of the Vulnerable Software and Affected Versions Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description The issue is related to a remote code execution problem in Microsoft...

7.8CVSS0.00755EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/12/27 12:00 a.m.•26 views

The vulnerability of the `__lpass_get_dmactl_handle` function in the qcom component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the lpassgetdmactlhandle function in the qcom component of the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.2CVSS5.9AI score0.00241EPSS
SaveExploits0References12Affected Software2
OSV
OSV
•added 2024/12/19 8:15 a.m.•15 views

CVE-2021-26093

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

6.5CVSS5.8AI score0.00161EPSS
SaveExploits0References1
Rows per page
Query Builder