Lucene search
+L

447 matches found

CNNVD
CNNVD
added 2024/12/10 12:0 a.m.5 views

Silicon Labs Z-Wave 700和800 安全漏洞

Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are both a family of chips from Silicon Labs, USA. A security vulnerability exists in Silicon Labs Z-Wave 700 and 800 v7.21.1, which stems from insecure privilege management. An attacker exploiting this...

6.5CVSS6.8AI score0.00342EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.5 views

Silicon Labs Z-Wave 700和800 安全漏洞

The Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are a family of chips from Silicon Labs, Inc. A security vulnerability exists in the Silicon Labs Z-Wave 700 and 800 version 7.21.1 that stems from an insecure privilege that allows an attacker to...

6.2CVSS6.7AI score0.00221EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.6 views

Silicon Labs Z-Wave 700和Silicon Labs Z-Wave 800 安全漏洞

Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are a series of chips from Silicon Labs, Inc. in the United States. A security vulnerability exists in Silicon Labs Z-Wave 700 and Silicon Labs Z-Wave 800 version v7.21.1, which stems from insecure privilege...

8.8CVSS6.8AI score0.00449EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/12/10 12:0 a.m.20 views

CVE-2024-50924

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause disrupt communications between the controller and the device itself via repeatedly sending crafted packets to the controller...

0.00382EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.5 views

Silicon Labs Z-Wave 700和800 安全漏洞

Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are a series of chips from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs SiLabs Z-Wave Series versions 700 and 800 v7.21.1 that stems from insecure privilege management. An attacker...

6.5CVSS6.6AI score0.00382EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/21 12:0 a.m.10 views

PT-2024-8878 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 777.4 Description: The issue is related to a command injection vulnerability in the LDAP authentication mechanism, allowing for the execution of arbitrary commands on the server. This can be exploited by a...

9.8CVSS8.3AI score0.91128EPSS
Exploits2References18
OSV
OSV
added 2024/10/22 9:15 a.m.5 views

CVE-2024-9987

A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agentsmodulescsv functionality. This issue affects Pandora FMS: from 700 through 777.3...

8.8CVSS5.8AI score0.00408EPSS
Exploits0References1
NVD
NVD
added 2024/10/22 9:15 a.m.20 views

CVE-2024-35308

A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through 777.3...

8.8CVSS0.00588EPSS
Exploits0References1
OSV
OSV
added 2024/10/22 9:15 a.m.7 views

CVE-2024-35308

A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. This issue affects Pandora FMS: from 700 through 777.3...

8.8CVSS5.9AI score0.00588EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/02 10:7 a.m.18 views

CVE-2024-35294 Schneider Elektronik Series 700 prone to missing authentication for traffic capture function

An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials...

6.5CVSS0.0045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/02 10:7 a.m.8 views

CVE-2024-35294 Schneider Elektronik Series 700 prone to missing authentication for traffic capture function

An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials...

6.5CVSS7.5AI score0.0045EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/02 9:51 a.m.22 views

CVE-2024-35293 Schneider Elektronik Series 700 prone to missing authentication for critical reset function

An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS...

9.1CVSS0.00625EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/02 9:51 a.m.4 views

CVE-2024-35293 Schneider Elektronik Series 700 prone to missing authentication for critical reset function

An unauthenticated remote attacker may use a missing authentication for critical function vulnerability to reboot or erase the affected devices resulting in data loss and/or a DoS...

9.1CVSS7.4AI score0.00625EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/02 12:0 a.m.4 views

Schneider Electric Series 700 访问控制错误漏洞

The Schneider Electric Series 700 is a series of power transfer switches from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric Series 700 version 0.1.17.8 and earlier, which stems from the fact that an attacker can use unauthenticated device traffi...

6.5CVSS6.9AI score0.0045EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/06 12:0 a.m.30 views

Amazon Linux 2023 : nerdctl (ALAS2023-2024-700)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-700 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing...

7.5CVSS7.7AI score0.91969EPSS
Exploits1References8
OSV
OSV
added 2024/06/10 3:15 p.m.5 views

CVE-2024-35306

OS Command injection in Ajax PHP files via HTTP Request, allows to execute system commands by exploiting variables. This issue affects Pandora FMS: from 700 through 777...

9.8CVSS7.9AI score
Exploits0References1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.5 views

Pandora Security Breach

Pandora is an analytics framework for discovering if a file is suspicious and displaying the results conveniently. A security vulnerability exists in Pandora FMS versions 700 through prior to 777 that stems from the presence of operating system command injection, which allows the execution of...

9.8CVSS7.2AI score0.00926EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.10 views

Pandora Security Breach

Pandora is an analytics framework for discovering if a file is suspicious and displaying the results conveniently. A security vulnerability exists in Pandora FMS versions prior to 700 to 777 that stems from the presence of SQL injection, which results in the exploitation of the HTTP Request...

9.8CVSS7.3AI score0.00374EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.6 views

Pandora Security Breach

Pandora is an analytics framework used to find out if a file is suspicious and display the results conveniently. A security vulnerability exists in Pandora FMS versions 700 through prior to 777 that stems from improper input validation, which could allow an attacker to execute arbitrary system...

9.8CVSS7.2AI score0.01092EPSS
Exploits0References2
ICS
ICS
added 2024/04/04 6:0 a.m.59 views

Schweitzer Engineering Laboratories SEL 700 series relays

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schweitzer Engineering Laboratories Equipment : SEL 700 series relays Vulnerability : Inclusion of Undocumented Features 2. RISK EVALUATION Successful exploitation of this vulnerability...

6.5CVSS6.8AI score0.00455EPSS
Exploits0References8
Rows per page
Query Builder