Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:34 a.m.4 views

CVE-2024-45489

Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however because of misconfigured Firebase ACLs, it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and...

9.8CVSS7.8AI score0.0788EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/05/14 12:0 a.m.10 views

Linksys E5600 Router <= 1.1.0.26 Multiple Command Injection Vulnerabilities

Linksys E5600 routers are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS5.8AI score0.13302EPSS
Exploits5References6
Circl
Circl
added 2025/05/06 6:21 p.m.12 views

CVE-2025-45489

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis5tleh2t 2025-05-06 20:20:33+00:00| seen| https://t.me/cvedetector/24637...

9.8CVSS4.8AI score0.08109EPSS
Exploits1References2
NVD
NVD
added 2025/05/06 4:15 p.m.10 views

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

9.8CVSS0.08109EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/05/06 12:0 a.m.8 views

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

7.9AI score0.08109EPSS
Exploits1References2
Circl
Circl
added 2024/09/20 7:45 p.m.2 views

CVE-2024-45489

creationtimestamp| type| source ---|---|--- 2024-09-20 19:45:10+00:00| seen| https://t.me/cvedetector/6113 2024-09-23 08:30:38+00:00| seen| Telegram/7gCCrXcF7kplbW8vCcSuolSiDuLcYtPRKYzfdVi7ua9f0qw 2024-10-02 14:39:58+00:00| exploited| https://t.me/xakepru/16487 2024-10-02 16:38:47+00:00|...

9.8CVSS5.8AI score0.0788EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/09/20 12:0 a.m.9 views

CVE-2024-45489

Arc before 2024-08-26 allows remote code execution in JavaScript boosts. Boosts that run JavaScript cannot be shared by default; however because of misconfigured Firebase ACLs, it is possible to create or update a boost using another user's ID. This installs the boost in the victim's browser and...

9.7AI score0.0788EPSS
Exploits0References3
OSV
OSV
added 2021/12/25 2:15 a.m.3 views

CVE-2021-45489

In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG...

7.5CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2021/12/25 1:3 a.m.62 views

CVE-2021-45489

CVE-2021-45489 refers to NetBSD up to 9.2 where the IPv6 Flow Label generation uses a weak cryptographic PRNG. Affected: NetBSD 9.2 and earlier IP stack behavior related to Flow Label generation. Consequence: potential information leakage or traffic-related exposure described by multiple sources;...

7.5CVSS7.5AI score0.00322EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder