Lucene search
+L

807 matches found

osv_gsd
osv_gsd
•added 2022/11/14 7:30 p.m.•13 views

GSD-2022-1007364 ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS

ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.221 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/11/11 12:00 a.m.•2 views

PT-2022-38070

Уязвимость функции ata tport add модуля drivers/ata/libata-transport.c драйвера SATA/PATA ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информа...

7.8CVSS0.00226EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2022/10/17 12:00 a.m.•10 views

PT-2025-37617

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-25-generic 25-Ubuntu Description An array-index-out-of-bounds issue was identified in the Linux kernel's AHCI driver. The sata pmp init links function initializes link-pmp up to SATA PMP MAX PORTS, while t...

8.8CVSS6.1AI score0.00208EPSS
SaveExploits0References57
CNVD
CNVD
•added 2022/10/11 12:00 a.m.•80 views

Cisco ATA 190 LLDP Packet Input Validation Error Vulnerability

The Cisco ATA 190 is an analog phone adapter from Cisco, U.S.A. An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation in certain LLDP packet header fields. An unauthenticated, remote attacker could exploit the vulnerability to...

5.3CVSS2.5AI score0.01002EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/10/11 12:00 a.m.•70 views

Cisco ATA 190 Series Protocol Packet Input Validation Error Vulnerability

The ATA 190, ATA 191, and ATA 192 is a Cisco ATA 190 series analog phone adapter. An input validation error vulnerability exists in the Cisco ATA 190 local deployment only, ATA 191 local deployment or multi-platform deployment, and ATA 192 multi-platform deployment only, which stems from a securi...

5.3CVSS6AI score0.01002EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/10/11 12:00 a.m.•73 views

Cisco ATA 190 Series Protocol Message Input Validation Error Vulnerability

ATA 190, ATA 191, ATA 192 is a Cisco ATA 190 Series analog phone adapter.An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation checks when processing Cisco Discovery Protocol messages, and can be exploited by an unauthenticated,...

8.3AI score0.00775EPSS
SaveExploits0
Cisco
Cisco
•added 2022/10/05 4:00 p.m.•64 views

Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP for Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to execute code, cause the service to reload unexpectedly, or cause Cisco Discovery Protocol or LLDP database corrupti...

5.3CVSS6.1AI score0.01002EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/10/05 12:00 a.m.•25 views

Cisco ATA 190 缓冲区错误漏洞

The Cisco ATA 190 is an analog telephone adapter from Cisco. The Cisco ATA 190 Series has a buffer error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code,...

5.3CVSS5.8AI score0.00859EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/05 12:00 a.m.•26 views

PT-2022-5300 · Cisco · Cisco Ata 190 Series Adaptive Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Adaptive Telephone Adapter firmware affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to cause a Denial of Service D...

5.3CVSS7AI score0.00859EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/10/05 12:00 a.m.•23 views

Cisco ATA 190 输入验证错误漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has an input validation error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute...

8.8CVSS8AI score0.00684EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/10/05 12:00 a.m.•21 views

PT-2022-6065 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to the Link Layer Discovery Protocol LLDP functionality and Cisco Discovery Protocol implementation in the firmware of Cisco Analo...

5.3CVSS6AI score0.01002EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/10/05 12:00 a.m.•25 views

Cisco ATA 190 代码注入漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has a code injection vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code, caus...

5.3CVSS6AI score0.01002EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/10/05 12:00 a.m.•23 views

PT-2022-6064 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to the implementation of the Link Layer Discovery Protocol LLDP functionality in the firmware of Cisco Analog Telephone Adapter AT...

5.3CVSS5.9AI score0.01002EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
•added 2022/09/01 12:00 a.m.•65 views

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2173-1 Rating: important References: 1177282 1199365 1200015 1200143 1200144 1200206 1200207 1200249 1200259 1200263 1200268 1200529 Cross-References: CVE-2020-26541 CVE-2022-1966 CVE-2022-1974...

7.8CVSS6.4AI score0.00528EPSS
SaveExploits6References12
OPENSUSE Linux
OPENSUSE Linux
•added 2022/09/01 12:00 a.m.•63 views

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2422-1 Rating: important References: 1065729 1179195 1180814 1184924 1185762 1192761 1193629 1194013 1195504 1195775 1196901 1197362 1197754 1198020 1198924 1199482 1199487 1199489 1199657 1200217...

7.8CVSS6.5AI score0.05451EPSS
SaveExploits13References55
OPENSUSE Linux
OPENSUSE Linux
•added 2022/09/01 12:00 a.m.•68 views

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2549-1 Rating: important References: 1065729 1179195 1180814 1184924 1185762 1192761 1193629 1194013 1195504 1195775 1196901 1197362 1197754 1198020 1198924 1199482 1199487 1199489 1199657 1200217...

7.8CVSS6.6AI score0.05451EPSS
SaveExploits13References60
attackerkb
attackerkb
•added 2022/08/15 7:15 p.m.•13 views

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

5.4CVSS6AI score0.01264EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2022/08/15 7:15 p.m.•19 views

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

5.4CVSS5.8AI score0.01264EPSS
SaveExploits2References3
Prion
Prion
•added 2022/08/15 7:15 p.m.•26 views

Cross site scripting

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

4.9CVSS5.2AI score0.01264EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2022/08/15 6:44 p.m.•50 views

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

5.4AI score0.01264EPSS
SaveExploits2References2
Rows per page
Query Builder