Lucene search
+L

508 matches found

RedhatCVE
RedhatCVE
added 2026/01/08 3:14 a.m.10 views

CVE-2025-47369

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID...

5.5CVSS6.8AI score0.00077EPSS
SaveExploits2References1
NVD
NVD
added 2026/01/07 12:17 p.m.12 views

CVE-2025-47369

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID...

5.5CVSS0.00077EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2026/01/07 12:00 a.m.15 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a weak hash value returned to userland code in response to an IOCTL call to obtain a session ID, which could lead to information disclosure...

5.5CVSS6.6AI score0.00077EPSS
SaveExploits2References2
CVE
CVE
added 2026/01/06 10:48 p.m.44 views

CVE-2025-47369

The CVE-2025-47369 issue relates to Qualcomm’s CVP driver: a session ID returned to userland is derived from a kernel pointer via hash32_ptr, a non-cryptographic and reversible fold. This leaks kernel addresses and can deterministically reveal the original pointer due to ARM64 address layout, eff...

5.5CVSS6.5AI score0.00077EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2026/01/06 10:48 p.m.49 views

CVE-2025-47369 Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID...

5.5CVSS0.00077EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2026/01/06 10:48 p.m.6 views

CVE-2025-47369 Information Exposure in Computer Vision

Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID...

5.5CVSS6.5AI score0.00077EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/01/06 12:00 a.m.21 views

PT-2026-1540

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An information disclosure issue exists due to a weak hashed value being returned to userland code in response to an IOCTL call used to obtain a session ID. This could potentially allow unauthorized...

5.5CVSS6.1AI score0.00077EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
added 2025/12/17 8:04 p.m.14 views

CVE-2025-13532

Insecure defaults in the Server Agent component of Fortra's Core Privileged Access Manager BoKS can result in the selection of weak password hash algorithms. This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain...

6.2CVSS7AI score0.00099EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

Fortra Core Privileged Access Manager 安全漏洞

Fortra Core Privileged Access Manager is an access rights management system from Fortra, Inc. A security vulnerability exists in Fortra Core Privileged Access Manager version 9.0, which stems from an insecure default configuration that could lead to the selection of a weak password hash algorithm...

6.2CVSS6.7AI score0.00099EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/14 7:05 p.m.24 views

CVE-2025-14636

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS4.3AI score0.0029EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/13 9:30 p.m.17 views

EUVD-2025-203271

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS4.4AI score0.0029EPSS
SaveExploits1References6
OSV
OSV
added 2025/12/13 7:15 p.m.13 views

CVE-2025-14636

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS5.2AI score0.0029EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/13 7:15 p.m.13 views

CVE-2025-14636

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS0.0029EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/13 7:02 p.m.32 views

CVE-2025-14636

CVE-2025-14636 affects Tenda AX9 firmware version 22.03.01.46, where the httpd component's image_check uses a weak hash. This enables remote exploitation with high attack complexity, and the exploit is publicly available (proof-of-concept). No concrete remediation/version fix is provided in the s...

6.3CVSS4.3AI score0.0029EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/12/13 7:02 p.m.7 views

CVE-2025-14636

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS4.8AI score0.0029EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/12/13 7:02 p.m.46 views

CVE-2025-14636 Tenda AX9 httpd image_check weak hash

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS0.0029EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/13 7:02 p.m.6 views

CVE-2025-14636 Tenda AX9 httpd image_check weak hash

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function imagecheck of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the...

6.3CVSS4.3AI score0.0029EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/13 12:00 a.m.23 views

Tenda AX9 安全漏洞

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A security vulnerability exists in Tenda AX9 version 22.03.01.46, which originates from the use of a weak hash in the imagecheck function in the httpd component, which could lead to remote attacks...

6.3CVSS5AI score0.0029EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/13 12:00 a.m.20 views

PT-2025-51132

Name of the Vulnerable Software and Affected Versions Tenda AX9 version 22.03.01.46 Description A security flaw exists in the image check function within the httpd component of Tenda AX9 version 22.03.01.46. This issue involves the use of a weak hash, allowing for remote attacks. The attack is...

6.3CVSS4.3AI score0.0029EPSS
SaveExploits1References11
Nextcloud
Nextcloud
added 2025/12/05 8:08 a.m.18 views

Calendar app used predictable proposal participant tokens

None...

6.5CVSS5.2AI score0.00295EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder