Lucene search
+L
Bdu FstecMost viewed

92710 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.17 views

The vulnerability of the web_radiusSrv_dftParam_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webRadiusSrvdftParampost function in the microprogramming software for PLANET Technology is related to buffer overflows in the stack during the processing of the radDftParamKey parameter. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS5.8AI score0.00494EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.17 views

The vulnerability of the amdgpu_dm_initialize_drm_device() function in the DRI driver allows a hacker to cause a system failure. This vulnerability relates to AMD GPU-based Linux operating system hardware.

The vulnerability of the amdgpudminitializedrmdevice function in the DRI driver for AMD graphics cards in Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00265EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.17 views

The vulnerability of the VBI libzvbi library’s capture and decoding function is related to a numerical overflow in the _vbi_strndup_iconv() function. This allows an attacker to cause a service failure.

The vulnerability of the VBI libzvbi library’s capture and decoding functions is related to a numerical overflow in the vbistrndupiconv function. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

5CVSS6.4AI score0.00608EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.17 views

The vulnerability of the webExcptypemanFilter function in the Tenda FH451 router software allows a hacker to execute arbitrary code.

The vulnerability of the webExcptypemanFilter function in the Tenda FH451 router software lies in the reading of data beyond the buffer boundaries in memory during the processing of the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a special...

9CVSS8.3AI score0.00938EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/25 12:0 a.m.17 views

The vulnerability of the web_snmpv3_remote_engineId_add_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the websnmpv3remoteengineIdaddpost function in PLANET Technology’s microprogrammed device software is related to the issue of operations going beyond the buffer boundaries in memory when processing the remoteip parameter. Exploiting this vulnerability could allow a malicious...

10CVSS5.7AI score0.00494EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.17 views

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager lies in the lack of mechanisms for encoding or shielding output data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00146EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.17 views

The vulnerability of the Remote Desktop Gateway (RD Gateway) on the Microsoft Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Desktop Gateway RD Gateway server on the Microsoft Windows operating system relates to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow an attacker to cause service interruptio...

5.9CVSS7.8AI score0.30495EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/17 12:0 a.m.17 views

The vulnerability in the driver module/gpu/drm/amd/amdgpu/gmc_v12_0.c of the AMDGPU kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/gpu/drm/amd/amdgpu/gmcv120.c driver of the AMDGPU core in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00178EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/17 12:0 a.m.17 views

The vulnerability of the dce60_tg_funcs() function in the driver (drivers/gpu/drm/amd/display/dc/dce60/dce60_timing_generator.c) of the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the dce60tgfuncs function in the driver drivers/gpu/drm/amd/display/dc/dce60/dce60timinggenerator.c of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00178EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/16 12:0 a.m.17 views

The vulnerability of the AES-128-CBC encryption algorithm in the microprogramming-based router software Tenda RX2 Pro allows a hacker to disclose the protected information.

The vulnerability of the AES-128-CBC encryption algorithm in the microprogramming-based router software Tenda RX2 Pro relates to the storage of encryption keys in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

8.5CVSS5.4AI score0.00252EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.17 views

The vulnerability of MacOS operating systems, related to errors in the use of standard permissions, allows attackers to disclose confidential information.

The vulnerability of MacOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a remote attacker to disclose confidential information...

10CVSS5.5AI score0.00872EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:0 a.m.17 views

The vulnerability of the multimedia platform GPAC, related to the assignment of the NULL pointer, allows a perpetrator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.6AI score0.00375EPSS
SaveExploits1References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/02 12:0 a.m.17 views

Vulnerability of the mcp251x_stop() function in the drivers/net/can/spi/mcp251x.c module – This driver supports network devices of the Linux kernel, which can be exploited by attackers to cause service failures.

Vulnerability of the mcp251xstop function in the drivers/net/can/spi/mcp251x.c module – The Linux kernel’s CAN network device driver relies on the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.5AI score0.00235EPSS
SaveExploits0References14Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.17 views

The vulnerability of the HTTP Header Handler component in the http_request_parse function of the D-Link DAP-1562 wireless access point software allows a attacker to compromise the confidentiality, accessibility, and integrity of the protected information.

The vulnerability of the HTTP Header Handler component in the httprequestparse function of the D-Link DAP-1562 wireless access point’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.5CVSS7.6AI score0.03485EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.17 views

The vulnerability of the virtual learning environment web service Moodle allows a perpetrator to gain unauthorized access to user data.

The vulnerability of the Moodle virtual learning environment’s web service is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...

4.3CVSS5.5AI score0.00344EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.17 views

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to a memory leak in the qedfallocandinitsb function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00224EPSS
SaveExploits0References18Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.17 views

The vulnerability of the netdevsim component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netdevsim component in the Linux operating system’s kernel is related to improper handling of the network packet header in the nsimdevhealthbreakwrite function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00207EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.17 views

Vulnerability of the Server component: The Replication function of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system’s replication component is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.4AI score0.00823EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:0 a.m.17 views

The vulnerability of the Jenkins automation server lies in the redirection of URLs to an unreliable website, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Jenkins automation server relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...

5CVSS5.6AI score0.00601EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:0 a.m.17 views

The vulnerability of the th_read() function in the libtar package, which allows a hacker to access confidential information

The vulnerability of the thread function in the libtar package is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential information...

7.8CVSS6.8AI score0.0173EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/24 12:0 a.m.17 views

The vulnerability of the SSH plugin of the JetBrains Toolbox, a set of development tools, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the SSH plugin in the JetBrains Toolbox suite is related to incorrect verification of the certificate’s authenticity. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

4.2CVSS5.5AI score0.00189EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.17 views

The vulnerability of the SAP NetWeaver software integration platform, related to incorrect authorization, allows a perpetrator to execute arbitrary code.

The vulnerability of the SAP NetWeaver software integration platform is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

4.3CVSS5.9AI score0.00335EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.17 views

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to trigger service failures using specially created ARP packets in the...

6.5CVSS5.5AI score0.00246EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.17 views

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.5AI score0.00158EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.17 views

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibili...

10CVSS7.7AI score0.01946EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/21 12:0 a.m.17 views

The vulnerability of the software URL processor for Cisco Webex App allows a perpetrator to execute arbitrary commands.

The vulnerability of the software URL processor for Cisco Webex App relates to the ability to download files from untrusted sources. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands when a user accesses a specially crafted link...

10CVSS5.9AI score0.0095EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/19 12:0 a.m.17 views

The vulnerability of the exec() function in the icepay.php script of the MagnusBilling VoIP system allows a hacker to execute arbitrary commands.

The vulnerability of the exec function in the icepay.php script of the MagnusBilling VoIP system is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the democ parameter. Exploiting this vulnerability allows a remote...

10CVSS8.2AI score0.9425EPSS
SaveExploits15References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/18 12:0 a.m.17 views

The vulnerability of the ppp_channel_bridge_input() function in the Linux operating system’s ppp component, which allows a hacker to cause a service failure

The vulnerability of the pppchannelbridgeinput function in the Linux operating system’s ppp component is related to insufficient resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.7AI score0.00236EPSS
SaveExploits0References17Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/18 12:0 a.m.17 views

The vulnerability of the smcd_v2_ext_offset() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcdv2extoffset function in the Linux operating system is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00625EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/17 12:0 a.m.17 views

The vulnerability of the Navigation components in Google Chrome and Microsoft Edge allows attackers to circumvent existing security restrictions.

The vulnerability of the Navigation components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the page. Exploiting this vulnerability allows an attacker to bypass existing security restrictions by using a specially created HTML page...

6.4CVSS6.1AI score0.00234EPSS
SaveExploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/17 12:0 a.m.17 views

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user’s interface.

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...

6.4CVSS6.6AI score0.00252EPSS
SaveExploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

The vulnerability of the mgmt_alloc_skb() function in the net/bluetooth/mgmt.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mgmtallocskb function in the net/bluetooth/mgmt.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00195EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

The vulnerability of the kfd_queue_acquire_buffers() function in the drivers/gpu/drm/amd/amdkfd/kfd_queue.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kfdqueueacquirebuffers function in the drivers/gpu/drm/amd/amdkfd/kfdqueue.c module of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00191EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

The vulnerability of the rio_add_net() function in the drivers/rapidio/rio-scan.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rioaddnet function in the drivers/rapidio/rio-scan.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00205EPSS
SaveExploits0References17Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

The vulnerability of the ipheth_rcvbulk_callback() function in the Linux kernel’s USB device driver support mechanism allows a hacker to induce a service failure.

The vulnerability of the iphethrcvbulkcallback function in the Linux kernel’s USB device driver support routine is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.8AI score0.00206EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” involves deficiencies in access control, allowing attackers to elevate their privileges to the root level.

The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the root level...

9CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

The vulnerability of the cow_file_range() function in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cowfilerange function in the fs/btrfs/inode.c module of the Linux operating system is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00191EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/16 12:0 a.m.17 views

Vulnerability of the stm32_cryp_irq_thread() function – the driver of the Linux kernel cryptographic accelerator, allowing a hacker to cause a service failure

The vulnerability of the stm32crypirqthread function in the Linux kernel cryptographic acceleration driver is related to the multiple locking of critical resources. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.4AI score0.00469EPSS
SaveExploits0References11Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

The vulnerability of the cleanup_srcu_struct() function in the kernel/rcu/srcutree.c module of the synchronization subsystem in Linux multi-threaded kernel systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cleanupsrcustruct function in the kernel/rcu/srcutree.c sub-system of the synchronization mechanism in Linux multi-threaded kernel systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS6.3AI score0.0025EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

Vulnerability of the pci_pme_list_scan() function in the drivers/pci/pci.c module – The driver support for Linux’s PCI hardware allows a hacker to trigger a service failure.

Vulnerability of the pcipmelistscan function in the drivers/pci/pci.c module – The Linux kernel’s device support driver is vulnerable when it is divided by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...

6.2CVSS5.9AI score0.0023EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

The vulnerability of the sk_setsockopt() function in the net/core/sock.c module exposes the support for kernel network functions in the Linux operating system, allowing an attacker to cause a service failure.

The vulnerability of the sksetsockopt function in the net/core/sock.c module related to Linux kernel network functions is associated with synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00158EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

The vulnerability of the ALSA kernel component in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the ALSA kernel component in Linux operating systems is related to the use of an uninitialized resource in the function applyconstrainttosize. Exploiting this vulnerability can allow a attacker to cause a service failure...

5.5CVSS6.5AI score0.00229EPSS
SaveExploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

The vulnerability of the jfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the jfs component in the Linux operating system’s kernel involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.9AI score0.00235EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

The vulnerability of the kvm_tdp_mmu_put_root() function in the arch/x86/kvm/mmu/tdp_mmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmtdpmmuputroot function in the arch/x86/kvm/mmu/tdpmmu.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromis...

7.8CVSS6.3AI score0.00247EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

The vulnerability of the sched_ext component of the pick_task_scx function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the schedext component in the picktaskscx function of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.8CVSS6.8AI score0.00145EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.17 views

Vulnerability of the function dcn35_clk_mgr_helper_populate_bw_params() in the module drivers/gpu/drm/amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards with Linux operating systems. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the function dcn35clkmgrhelperpopulatebwparams in the module drivers/gpu/drm/amd/display/dc/clkmgr/dcn35/dcn35clkmgr.c – Drivers supporting Direct Rendering Infrastructure DRI for AMD graphics cards with Linux operating systems have a unvalidated array indexing issue. Exploiting...

7.8CVSS6.3AI score0.0022EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:0 a.m.17 views

The vulnerability of Microsoft 365 Apps for Enterprise and Office, related to the use of memory after it is freed, allows attackers to increase their privileges.

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.3CVSS7.6AI score0.01089EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.17 views

The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Digital Media component of Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.5AI score0.0045EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.17 views

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications (VSTA) is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.3CVSS7.6AI score0.00701EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.17 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

10CVSS5.8AI score0.0029EPSS
SaveExploits0References3
Total number of security vulnerabilities5000