Lucene search
+L

12013 matches found

Positive Technologies
Positive Technologies
added 2023/11/14 12:00 a.m.4 views

PT-2023-6990 · Siemens · Scalance Xb205-3

Name of the Vulnerable Software and Affected Versions: SCALANCE XB205-3 SC, PN versions prior to V4.5 SCALANCE XB205-3 ST, E/IP versions prior to V4.5 Description: The issue is related to the use of a hardcoded cryptographic key in the software of industrial switches. This could allow a remote...

6.9CVSS6.8AI score0.00688EPSS
SaveExploits0References11
OSV
OSV
added 2023/11/13 12:00 p.m.8 views

RUSTSEC-2023-0088 `loopdev` crate is unmaintained; use 'loopdev-3` instead.

The loopdev crate was last released in Oct, 2021. It has been unable to build in Fedora 38 and above since April, 2023. The loopdev-3 crate is a maintained fork: https://github.com/stratis-storage/loopdev-3...

7.1AI score
SaveExploits0References3
Code423n4
Code423n4
added 2023/11/13 12:00 a.m.12 views

burnToMint and burnOrSwapExternalToMint allows bypass of periodic sales timer.

Lines of code Vulnerability details Description Sales Mode 3 is when the contract allows only one mint per period of time. However, burnToMint and burnOrSwapExternalToMint allows an user to bypass this restriction, since these functions don't have periodic sales check. This can be a problem since...

7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/11/13 12:00 a.m.29 views

Ubuntu: Security Advisory (USN-6465-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.8AI score0.00452EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2023/11/12 11:26 a.m.412 views

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 RCE Pseudoshell This script leverages CVE-2023...

10CVSS10AI score0.99723EPSS
SaveExploits33
NVD
NVD
added 2023/11/10 8:15 a.m.24 views

CVE-2023-6073

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...

6.3CVSS0.00393EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/10 8:15 a.m.10 views

CVE-2023-6073

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...

6.3CVSS6.6AI score0.00393EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/11/10 7:32 a.m.13 views

CVE-2023-6073 DoS and Control of Volume Settings for VW ID.3 ICAS3 IVI ECU

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...

5.7CVSS6.4AI score0.00393EPSS
SaveExploits1References1
CVE
CVE
added 2023/11/10 7:32 a.m.85 views

CVE-2023-6073

CVE-2023-6073 affects the Volkswagen ID.3 ICAS 3 IVI ECU. Affected component: ICAS 3 IVI ECU in VW Group vehicles with the same hardware. Description provided across sources states that an attacker can perform a Denial of Service to crash the ICAS 3 IVI ECU and spoof REST API volume commands to i...

6.3CVSS6AI score0.00393EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/10 7:32 a.m.30 views

CVE-2023-6073 DoS and Control of Volume Settings for VW ID.3 ICAS3 IVI ECU

Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...

5.7CVSS6.6AI score0.00393EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2023/11/10 12:00 a.m.34 views

Ubuntu 22.04 LTS : Linux kernel (GKE) vulnerabilities (USN-6465-3)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6465-3 advisory. Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereferen...

5.5CVSS6.8AI score0.00452EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/11/10 12:00 a.m.12 views

PT-2023-32498 · Volkswagen · Volkswagen Id.3

Name of the Vulnerable Software and Affected Versions: Volkswagen ID.3 and other vehicles of the VW Group with the same hardware affected versions not specified Description: An attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU and spoof volume setting commands to...

6.3CVSS6.2AI score0.00393EPSS
SaveExploits1References5
Photon
Photon
added 2023/11/09 12:00 a.m.37 views

Critical Photon OS Security Update - PHSA-2023-3.0-0685

Updates of 'python3', 'memcached' packages of Photon OS have been released...

9.8CVSS6.8AI score0.00797EPSS
SaveExploits0
OSV
OSV
added 2023/11/08 10:15 p.m.12 views

CVE-2023-5075

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...

6.7CVSS6.3AI score0.0023EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/08 10:15 p.m.28 views

CVE-2023-5075

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...

6.7CVSS0.0023EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/08 10:01 p.m.46 views

CVE-2023-5075

CVE-2023-5075 affects Lenovo IdeaPad Duet 3-10IGL5 via a buffer overflow in the FmpSipoCapsuleDriver. The root cause is a vulnerability in the driver that could allow a local attacker with elevated privileges to execute arbitrary code. The available documents confirm the affected component and im...

6.7CVSS6.9AI score0.0023EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/08 10:01 p.m.35 views

CVE-2023-5075

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...

6.7CVSS7.1AI score0.0023EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/08 9:15 a.m.30 views

CVE-2023-5978

In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the capnet libcasper3 service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other...

7.5CVSS0.00511EPSS
SaveExploits0References2
CBLMariner
CBLMariner
added 2023/11/08 2:07 a.m.85 views

CVE-2023-39129 affecting package crash for versions less than 8.0.1-3

CVE-2023-39129 affecting package crash for versions less than 8.0.1-3. A patched version of the package is available...

5.5CVSS5.7AI score0.00259EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2023/11/08 2:07 a.m.28 views

CVE-2023-39130 affecting package crash for versions less than 8.0.1-3

CVE-2023-39130 affecting package crash for versions less than 8.0.1-3. A patched version of the package is available...

5.5CVSS5.7AI score0.00245EPSS
SaveExploits0
Rows per page
Query Builder