Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.7 views

Vulnerability of the mxs_dcp_start_dma() function in the drivers/crypto/mxs-dcp.c module – a driver for the Linux kernel’s cryptographic acceleration engine, which allows a hacker to cause a system failure.

Vulnerability of the mxsdcpstartdma function in the drivers/crypto/mxs-dcp.c module – The Linux kernel cryptographic accelerator driver is vulnerable due to the use of an uninitialized resource. Exploiting this vulnerability could allow a hacker to cause a system failure...

7.1CVSS5.9AI score0.00017EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the smb20_oplock_break_ack() function in the Linux file system support module fs/ksmbd/smb2pdu.c allows a attacker to cause a service failure.

The vulnerability of the smb20oplockbreakack function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS6.4AI score0.00018EPSS
Exploits0References15Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the audit_filter_rules() function in the kernel/auditsc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the auditfilterrules function in the kernel/auditsc.c module of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.4CVSS6.1AI score0.00027EPSS
Exploits0References12Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the vxlan_exit_batch_net() function in the drivers/net/vxlan.c module – A driver for supporting network adapter devices in the Linux operating system, which allows an attacker to compromise the integrity and accessibility of protected information.

Vulnerability of the vxlanexitbatchnet function in the drivers/net/vxlan.c module – The Linux kernel’s network adapter support driver has a vulnerability that leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to compromise the integrity and...

7.1CVSS6.1AI score0.00015EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

Vulnerability of the iscsi_eh_abort() function in the drivers/scsi/libiscsi.c module – This driver for supporting SCSI devices in Linux kernels allows a hacker to trigger a service failure.

Vulnerability of the iscsiehabort function in the drivers/scsi/libiscsi.c module – The Linux system’s SCSI device driver framework involves reusing previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.2AI score0.00027EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the ath11k_wmi_gtk_offload_status_event() function in the drivers/net/wireless/ath/ath11k/wmi.c module – The wireless adapter support driver from Atheros/Qualcomm in the Linux operating system allows a hacker to induce a service failure.

Vulnerability of the ath11kwmigtkoffloadstatusevent function in the drivers/net/wireless/ath/ath11k/wmi.c module – The wireless adapter support driver from Atheros/Qualcomm in Linux operating systems is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability...

7.8CVSS6.6AI score0.00016EPSS
Exploits0References12Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the pbkdf2 library in the Node.js software platform, which allows attackers to forge digital signatures

The vulnerability of the pbkdf2 library in the Node.js software platform is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability allows a malicious actor to forge digital signatures by sending specially crafted packets...

10CVSS5.3AI score0.00416EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the ieee80211_crypto_ccmp_decrypt() function in the net/mac80211/wpa.c module of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211cryptoccmpdecrypt function in the net/mac80211/wpa.c module of the mac80211 stack in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS6.5AI score0.00015EPSS
Exploits0References20Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the aq_ptp_ring_alloc() function in the drivers/net/ethernet/aquantia/atlantic/aq_ptp.c module – A driver for supporting Ethernet adapter cards with a Quantia Atlantic chipset in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the aqptpringalloc function in the drivers/net/ethernet/aquantia/atlantic/aqptp.c module – The Ethernet adapter driver with the aQuantia Atlantic chipset in the Linux operating system is vulnerable to a vulnerability where previously released memory is reclaimed. Exploiting this...

7.8CVSS6.7AI score0.0003EPSS
Exploits0References22Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the ieee80211_check_fast_xmit() function in the net/mac80211/tx.c module of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211checkfastxmit function in the net/mac80211/tx.c module of the mac80211 stack in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS6.6AI score0.00016EPSS
Exploits0References16Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the ipoctal_port_activate() function in the drivers/ipack/devices/ipoctal.c module – The IndustryPack device support driver for the Linux operating system allows attackers to compromise the confidentiality and accessibility of protected information.

Vulnerability of the ipoctalportactivate function in the drivers/ipack/devices/ipoctal.c module – The IndustryPack device support driver for the Linux operating system contains a vulnerability that may lead to the disclosure of confidential information. Exploiting this vulnerability could allow a...

7.1CVSS6.6AI score0.00012EPSS
Exploits0References20Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the fib_nh_match() function in the net/ipv4/fib_semantics.c module of the Linux operating system’s IPv4 kernel implementation allows a attacker to cause a service failure.

The vulnerability of the fibnhmatch function in the net/ipv4/fibsemantics.c module of the Linux operating system’s IPv4 kernel implementation is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS6.8AI score0.00017EPSS
Exploits0References14Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

Vulnerability of the compat_insnlist() function in the drivers/staging/comedi/comedi_fops.c module – The driver for supporting additional hardware devices in the Linux operating system allows a hacker to gain access to protected information.

Vulnerability of the compatinsnlist function in the drivers/staging/comedi/comedifops.c module – The driver for supporting additional hardware devices in Linux is vulnerable to a memory leak issue, where memory is not properly released before the last reference is deleted. Exploiting this...

5.5CVSS5.6AI score0.00015EPSS
Exploits0References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

Vulnerability of the amd_mp2pci_probe() function in the driver/hid/amd-sfh-hid/amd_sfh_pcie.c file – this driver for the Linux kernel’s input device subsystem allows a hacker to cause system failures.

Vulnerability of the amdmp2pciprobe function in the driver/hid/amd-sfh-hid/amdsfhpcie.c file – The driver for the Linux kernel’s input device subsystem is vulnerable due to a NULL pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause system failures...

5.5CVSS5.5AI score0.00014EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the sctp_rcv_ootb() function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to cause a service failure.

The vulnerability of the sctprcvootb function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00012EPSS
Exploits0References16Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.6AI score0.00115EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Apache Answer Q&A platform, related to the return of references to protected data from a public method, allows a violator to execute arbitrary code.

The vulnerability of the Apache Answer Q&A platform relates to the return of references to protected data from a public method. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

6.5CVSS7.5AI score0.0155EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the function ieee80211_get_rate_duration() in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ieee80211getrateduration function in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.4AI score0.00017EPSS
Exploits0References12Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the gb_uart_probe() function in the drivers/staging/greybus/uart.c module – This driver for supporting Greybus devices in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the gbuartprobe function in the drivers/staging/greybus/uart.c module – The drivers for Greybus devices in the Linux operating system rely on the re-use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00016EPSS
Exploits0References18Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the dbAdjTree() function in the fs/jfs/jfs_dmap.c module of the JFS file system support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dbAdjTree function in the fs/jfs/jfsdmap.c module of the JFS file system support in Linux’s operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00015EPSS
Exploits0References41Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the `find_or_create_cached_dir()` function in the fs/smb/client/cached_dir.c module allows a hacker to cause a service failure in Linux-based operating systems with SMB kernel support.

The vulnerability of the findorcreatecacheddir function in the fs/smb/client/cacheddir.c module, which is part of the SMB client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7AI score0.0002EPSS
Exploits0References12Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the ioapic_write_indirect() function in the arch/x86/kvm/ioapic.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform allows a attacker to cause a service failure.

The vulnerability of the ioapicwriteindirect function in the arch/x86/kvm/ioapic.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servic...

7.1CVSS6.8AI score0.00016EPSS
Exploits0References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the __nft_release_table() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nftreleasetable function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.00015EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the `cifs_close_deferred_file()` function in the fs/cifs/misc.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the cifsclosedeferredfile function in the fs/cifs/misc.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.6AI score0.00011EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the qeth_clear_working_pool_list() function in the drivers/s390/net/qeth_core_main.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the qethclearworkingpoollist function in the drivers/s390/net/qethcoremain.c file of the Linux operating system is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.7AI score0.00015EPSS
Exploits0References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the replace_nexthop_grp() function in the net/ipv4/nexthop.c module of the IPv4 protocol implementation in Linux’s kernel, which allows a attacker to cause a service failure.

The vulnerability of the replacenexthopgrp function in the net/ipv4/nexthop.c module of the Linux kernel’s IPv4 protocol implementation is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00014EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the dyn_event_release() function in the kernel/trace/trace_dynevent.c module, which supports Linux kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dyneventrelease function in the kernel/trace/tracedynevent.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS6.6AI score0.0002EPSS
Exploits0References15Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the tcf_mirred_to_dev() function in the net/sched/act_mirred.c module of the network/scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcfmirredtodev function in the net/sched/actmirred.c module of the network/scheduling subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.1AI score0.00014EPSS
Exploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS6.9AI score0.3288EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.4 views

The vulnerability of the iocg_pay_debt() function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iocgpaydebt function in the block/blk-iocost.c module, which supports the block-level kernel in the Linux operating system, is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

7.1CVSS6.7AI score0.00009EPSS
Exploits0References20Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

Vulnerability of the hci_dma_irq_handler() function in the drivers/i3c/master/mipi-i3c-hci/dma.c module – This driver is part of the Linux kernel’s I3C support mechanism, which can be exploited by attackers to cause service interruptions.

Vulnerability of the hcidmairqhandler function in the drivers/i3c/master/mipi-i3c-hci/dma.c module – The I3C driver support in the Linux kernel is vulnerable due to buffer out-of-buffer reading. Exploiting this vulnerability could allow an attacker to cause a system failure...

7.1CVSS6.6AI score0.00031EPSS
Exploits0References15Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the pbkdf2 library in the Node.js software platform, which allows attackers to forge digital signatures

The vulnerability of the pbkdf2 library in the Node.js software platform is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability allows a malicious actor to forge digital signatures by sending specially crafted packets...

9.3CVSS5.3AI score0.00091EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

Vulnerability of the vmbus_connect() function in the drivers/hv/connection.c module – Microsoft Hyper-V guest mode support driver for Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the vmbusconnect function in the drivers/hv/connection.c module – Microsoft’s Linux-based Hyper-V guest mode driver has a vulnerability that exposes confidential system information due to unprocessed debugging information. Exploitation of this vulnerability could allow an attacke...

8.1CVSS6.5AI score0.00042EPSS
Exploits0References20Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the ia_module_exit() function in the drivers/atm/iphase.c module – The Linux kernel’s ATM adapter support driver allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the iamoduleexit function in the drivers/atm/iphase.c module – The Linux kernel’s ATM adapter support driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS6.4AI score0.00017EPSS
Exploits0References22Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

Vulnerability of the its_vpe_irq_domain_alloc() function in the drivers/irqchip/irq-gic-v3-its.c module – This driver for Linux’s IRQ chips allows a hacker to gain access to protected information.

Vulnerability of the itsvpeirqdomainalloc function in the drivers/irqchip/irq-gic-v3-its.c module – The Linux kernel’s IRQ chip support driver is vulnerable to a single-shift error. Exploiting this vulnerability could allow an attacker to access protected information...

5.5CVSS6.1AI score0.00007EPSS
Exploits0References16Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to the ability to bypass authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...

7.5CVSS6.6AI score0.00161EPSS
Exploits0References17Affected Software20
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 relates to the manipulation of the zero pointer, allowing attackers to trigger service interruptions.

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.5AI score0.00101EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the dbAllocBits() function in the fs/jfs/jfs_dmap.c module of the Linux file system support for JFS kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dbAllocBits function in the fs/jfs/jfsdmap.c module of the Linux file system support module JFS is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS6.5AI score0.00014EPSS
Exploits0References38Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.2 views

The vulnerability of the `blk_mq_alloc_disk_for_queue()` function in the `block/blk-mq.c` module, which is part of the Linux kernel’s block-level support for distributed memory management, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the blkmqallocdiskforqueue function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS6.5AI score0.00013EPSS
Exploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.3 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.1AI score0.00115EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.1 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00172EPSS
Exploits0References2Affected Software1
Total number of security vulnerabilities74701