Lucene search
+L

7535 matches found

Packet Storm
Packet Storm
added 2021/08/16 12:00 a.m.325 views

COMMAX Smart Home Ruvie CCTV Bridge DVR Service Unauthenticated Config Write / DoS

COMMAX Smart Home Ruvie CCTV Bridge DVR Service Unauthenticated Config Write / DoS Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: n/a Summary: COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life value...

0.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2021/08/15 12:00 a.m.577 views

COMMAX Smart Home Ruvie CCTV Bridge DVR Service Unauthenticated Config Write / DoS

Summary COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life values and safety. Description The application allows an unauthenticated attacker to change the configuration of the DVR arguments and/or cause denial-of-service scenario throug...

5.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2021/08/15 12:00 a.m.507 views

COMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure

Summary COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life values and safety. Description The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose RTSP credentials in plain-text. COMMAX Smart Home Ruvie...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:00 a.m.13 views

The vulnerability of the IT reporting software Operation Bridge Reporter (OBR) arises from improper processing of parameters related to the final login resource point. This allows a perpetrator to execute arbitrary code.

The vulnerability of the IT reporting software Operation Bridge Reporter OBR is related to the improper processing of parameters at the final login point. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.9674EPSS
SaveExploits4References12Affected Software1
OpenVAS
OpenVAS
added 2021/08/12 12:00 a.m.28 views

Adobe Bridge Security Update (APSB21-53) - Windows

The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.3CVSS6.4AI score0.05343EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2021/08/10 12:00 p.m.15 views

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

1AI score
SaveExploits0
AlmaLinux
AlmaLinux
added 2021/08/10 12:00 p.m.20 views

nmstate bug fix and enhancement update

Nmstate is a library with an accompanying command line tool that manages host networking settings in a declarative manner. Bug Fixes and Enhancements: Cannot configure IP on an ovs interface which has the same name with ovs bridge BZ1979220 libnmstate expects VF to be named differently to its...

0.8AI score
SaveExploits0
OSV
OSV
added 2021/08/03 6:15 p.m.9 views

CVE-2019-14453

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

8.8CVSS7.2AI score0.01231EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/03 6:15 p.m.25 views

Privilege escalation

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

9CVSS8.7AI score0.01231EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/08/03 2:12 a.m.14 views

UVI-2021-1001339 misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

misc: alcorpci: fix null-ptr-deref when there is no PCI bridge This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/08/03 2:12 a.m.11 views

GSD-2021-1001339 misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

misc: alcorpci: fix null-ptr-deref when there is no PCI bridge This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.134 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/08/03 1:56 a.m.13 views

GSD-2021-1001280 misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

misc: alcorpci: fix null-ptr-deref when there is no PCI bridge This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.52 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/08/03 1:36 a.m.9 views

GSD-2021-1001205 misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

misc: alcorpci: fix null-ptr-deref when there is no PCI bridge This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/08/03 1:36 a.m.13 views

UVI-2021-1001205 misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge

misc: alcorpci: fix null-ptr-deref when there is no PCI bridge This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.4 by commit...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:00 a.m.9 views

The vulnerability of the Adobe Bridge file manager, related to the use of memory after it is freed, allows a hacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

6.5CVSS6.5AI score0.03951EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:00 a.m.10 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

8.8CVSS7.8AI score0.03868EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:00 a.m.12 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

8.8CVSS7.8AI score0.03868EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/07/26 8:15 p.m.8 views

CVE-2020-18172

A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges...

9.8CVSS5.8AI score0.0134EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/26 8:15 p.m.26 views

CVE-2020-18172

A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges...

9.8CVSS0.0134EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/26 8:15 p.m.20 views

Code injection

A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges...

7.5CVSS9.5AI score0.0134EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder