Lucene search
+L

3924 matches found

CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•82 views

D-Link DIR-816 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control in the form2PortriggerRule.cgi component, which can be exploited by an unauthenticated attacker to set a port trigger via a...

5.3CVSS6.9AI score0.0051EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/16 12:00 a.m.•97 views

CVE-2024-57680

The D-Link DIR-816A2 router is vulnerable to an access control error within the form2PortriggerRule.cgi component (firmware version 816A2_FWv1.10CNB05_R1B011D88210 ). An unauthenticated attacker can send a crafted POST request to manipulate the device's port trigger settings. Additional reports i...

5.3CVSS6.9AI score0.0051EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2025/01/13 4:39 p.m.•21 views

CVE-2024-6352 Malformed packet leads to denial of service in APS layer

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert...

4.3CVSS6.2AI score0.00243EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/01/13 8:25 a.m.•17 views

CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...

5.5CVSS7AI score0.00178EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•21 views

PT-2025-3682 · Ember · Ember Znet Stack

Name of the Vulnerable Software and Affected Versions: Ember ZNet stack affected versions not specified Description: A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert. Recommendations: At the moment, there is no information about a newer...

4.3CVSS7.4AI score0.00243EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/01/12 12:14 a.m.•9 views

SUSE CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...

4.7CVSS7.6AI score0.00178EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/01/11 1:15 p.m.•4 views

DEBIAN-CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...

5.5CVSS5.6AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/11 1:15 p.m.•31 views

CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...

5.5CVSS0.00178EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/01/11 1:15 p.m.•16 views

UBUNTU-CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to...

5.5CVSS6.2AI score0.00178EPSS
SaveExploits0References19
CVE
CVE
•added 2025/01/11 12:39 p.m.•132 views

CVE-2024-57805

CVE-2024-57805: In the Linux kernel ASoC: SOF: Intel: hda-dai, the link DMA was released on STOP, enabling a potential stream mix-up if a new stream starts before the previous is fully closed. This may lead to firmware errors or a crash. Root cause: releasing the link DMA on STOP rather than wait...

5.5CVSS6.9AI score0.00178EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/01/11 12:00 a.m.•23 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the ALSA module not using dmamappingerror when checking for DMA mapping errors, which could result in a warning...

5.5CVSS5.9AI score0.00209EPSS
SaveExploits0References4
CNVD
CNVD
•added 2025/01/07 12:00 a.m.•14 views

Linux kernel resource management error vulnerability (CNVD-2025-00975)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a resource management error vulnerability that stems from the fact that getmr will fail if a connection has not yet been established, triggering a...

7.8CVSS6.5AI score0.00312EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•22 views

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg that originates from an insecure file extension check that can be bypassed to trigger an arbitrary demultiplexer by appending a base64-encoded dat...

4.7CVSS6.4AI score0.00416EPSS
SaveExploits1References2
NVD
NVD
•added 2025/01/04 2:15 p.m.•71 views

CVE-2024-10957

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the 'recursiveunserializedreplace' function. This makes it possible for unauthenticated attackers to inject a P...

8.8CVSS0.00713EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/04 1:41 p.m.•321 views

CVE-2024-10957

CVE-2024-10957 affects UpdraftPlus: WP Backup & Migration Plugin (versions 1.23.8–1.24.11). It provides an unauthenticated PHP Object Injection via deserialization in recursive_unserialized_replace. No POP chain is present by default; exploitation requires a POP chain from another plugin/theme in...

8.8CVSS8.9AI score0.00713EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/04 7:24 a.m.•87 views

CVE-2024-10932

CVE-2024-10932 (Backup Migration, WordPress) Vulnerability: unauthenticated PHP Object Injection via deserialization in recursive_unserialize_replace, affecting all versions up to 1.4.6. Exploit can inject a PHP object; when a POP chain is present, an attacker can delete arbitrary files, retrieve...

8.8CVSS8.9AI score0.00798EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•19 views

PT-2025-20574

Name of the Vulnerable Software and Affected Versions Rust's Ring package affected versions not specified Debian Linux affected versions not specified Description A flaw in Rust's Ring package can trigger a panic when overflow checking is enabled. This issue can be exploited in the QUIC protocol ...

8.7CVSS8.1AI score0.01029EPSS
SaveExploits0References41
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•20 views

PT-2025-54615

Insufficient epoch key slot processing in OpenVPN 2.7 alpha1 through 2.7 rc5 allows remote authenticated users to trigger an assert resulting in a denial of service...

7CVSS5.9AI score0.00363EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/12/30 12:00 a.m.•40 views

PT-2024-10184 · D Link · Dir-816A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816A2 version 1.10CNB05 R1B011D88210 Description: The issue is related to an access control problem in the form2PortriggerRule.cgi component, allowing unauthenticated attackers to set the port trigger of the device via a crafted PO...

10CVSS9.5AI score0.0051EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•21 views

nl80211 Component DoS

The vulnerability of the nl80211 component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the nl80211triggerscan function. Exploiting this vulnerability can allow a hacker to cause a service failure...

5.5CVSS6.6AI score0.00234EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder