Lucene search
+L

1548 matches found

NVD
NVD
•added 2025/03/18 3:16 p.m.•20 views

CVE-2025-30110

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

6.5CVSS0.00278EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/18 12:00 a.m.•7 views

CVE-2025-30110: Authentication Bypass by Spoofing

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism relies solely on MAC address verification, allowing an attacker to bypass authentication by spoofing an already-paired MAC address that can be captured via an ARP scan...

6.5CVSS5.8AI score0.00278EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2024-26733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: arp: Prevent overflow in arpreqget. Ubuntu Linux - arp: Prevent overflow in arpreqget. syzkaller reported an overflown write ...

5.5CVSS6.8AI score0.00256EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/28 2:21 a.m.•11 views

SUSE CVE-2025-21762

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF...

5.5CVSS6.7AI score0.00636EPSS
SaveExploits0References16
OSV
OSV
•added 2025/02/27 3:15 a.m.•17 views

AZL-58890 CVE-2025-21762 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF...

8.1CVSS6.6AI score0.00636EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/27 3:15 a.m.•12 views

UBUNTU-CVE-2025-21762

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arpxmit arpxmit can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF...

8.1CVSS6.2AI score0.00636EPSS
SaveExploits0References47
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•1 views

PT-2025-8874

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, where the arp xmit function can be called without proper protection, potentially leading to a use-after-free UAF issue. To addres...

8.1CVSS0.00636EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 7:44 p.m.•25 views

CVE-2022-48580

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

8.8CVSS7.6AI score0.01548EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•15 views

PT-2025-30873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the ATM CLIP module, specifically within the clip push function. A recursive call can occur under certain conditions, potentially leading to ...

7.8CVSS7.1AI score0.00181EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/12/29 2:51 p.m.•30 views

CVE-2024-56647

A denial of service vulnerability was found in the Linux kernel. icmproutelookup creates input routes for locally generated packets during xfrm relookup ICMP traffic. Then it will set the input route dst-out = iprtbug to skb for DESTUNREACH, leading to loss of availability of the system. Mitigati...

5.5CVSS6.3AI score0.00223EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/27 3:15 p.m.•17 views

DEBIAN-CVE-2024-56647

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/27 3:15 p.m.•22 views

CVE-2024-56647

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

5.5CVSS6.2AI score0.00223EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2024/12/27 3:15 p.m.•46 views

UBUNTU-CVE-2024-56647

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

5.5CVSS6.1AI score0.00223EPSS
SaveExploits0References19
OSV
OSV
•added 2024/12/27 3:02 p.m.•26 views

CVE-2024-56647 net: Fix icmp host relookup triggering ip_rt_bug

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

5.5CVSS6AI score
SaveExploits0References7
CVE
CVE
•added 2024/12/27 3:02 p.m.•222 views

CVE-2024-56647

CVE-2024-56647: In the Linux kernel, icmp host relookup can trigger ip_rt_bug when ARP/link conditions and xfrm are involved. The fix skips icmp relookup for locally generated packets (e.g., ICMP errors) to avoid dst->out being ip_rt_bug on loopback and similar scenarios. Reproduced scenario s...

5.5CVSS6.3AI score0.00223EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•5 views

CVE-2024-56647: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

5.5CVSS5.8AI score0.00223EPSS
SaveExploits0References3
Amazon
Amazon
•added 2024/12/19 12:00 a.m.•25 views

Important: kernel

Issue Overview: A flaw was found in the smb client in the Linux kernel. A potential out-of-bounds error was seen in the smb2parsecontexts function. Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. CVE-2023-52434 A null pointer dereference flaw was found in t...

8CVSS6.6AI score0.0102EPSS
SaveExploits2
Amazon
Amazon
•added 2024/12/12 12:00 a.m.•30 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets CVE-2023-52620 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfslistxattr CVE-2023-52640 In the Linux kernel, th...

7.8CVSS6.6AI score0.01014EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2024/12/04 12:00 a.m.•27 views

Cisco NX-OS 5.2 and 6.1 Denial of Service (CVE-2012-3051)

Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service process crash or packet loss via a large number of ARP packets, aka Bug ID CSCtr44822. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

6.1CVSS5.7AI score0.00686EPSS
SaveExploits0References7
OSV
OSV
•added 2024/11/20 8:15 p.m.•16 views

CVE-2024-52757

D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arpsysasp function...

4.9CVSS6.1AI score0.00644EPSS
SaveExploits1References2
Rows per page
Query Builder