Lucene search
+L

1911 matches found

CVE
CVE
•added 2025/01/20 11:37 a.m.•83 views

CVE-2025-0479

Technical details (affected products, versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

8.6CVSS6.1AI score0.00438EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/20 11:37 a.m.•12 views

CVE-2025-0479 Security Misconfiguration Vulnerability in CP Plus Router

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Successful exploitation of this...

8.6CVSS6.1AI score0.00438EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/20 12:00 a.m.•15 views

PT-2025-3910 · Cp Plus · Cp Plus Router

Name of the Vulnerable Software and Affected Versions: CP Plus Router affected versions not specified Description: This issue exists due to insecure handling of cookie flags used within the web interface of the CP Plus Router. A remote attacker could exploit this by intercepting data transmission...

8.6CVSS6.6AI score0.00438EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/20 12:00 a.m.•6 views

CVE-2025-0479: Sensitive Cookie Without 'HttpOnly' Flag

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Successful exploitation of this...

8.6CVSS5.9AI score0.00438EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/20 12:00 a.m.•10 views

CP Plus CP-XR-DE21-S 安全漏洞

The CP Plus CP-XR-DE21-S is a wireless router from CP Plus. A security vulnerability exists in the CP Plus CP-XR-DE21-S that stems from insecure handling of cookie flags used in the web interface, which can be exploited by an attacker to obtain sensitive information and compromise the target syst...

8.6CVSS6.4AI score0.00438EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•19 views

PT-2025-2974 · Siemens · Siprotec 5 Compact 7Sx800 +16

Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 6MD84 CP300 versions prior to V9.80 SIPROTEC 5 6MD85 CP300 versions 7.80 through 9.79 SIPROTEC 5 6MD86 CP300 versions 7.80 through 9.79 SIPROTEC 5 6MD89 CP300 versions 7.80 through 9.89 SIPROTEC 5 6MU85 CP300 versions 7.80 through...

7.1CVSS7.3AI score0.00616EPSS
SaveExploits0References5
OSV
OSV
•added 2025/01/10 5:15 p.m.•18 views

CVE-2024-54848

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

7.4CVSS7.8AI score0.79249EPSS
SaveExploits19References4
NVD
NVD
•added 2025/01/10 5:15 p.m.•35 views

CVE-2024-54848

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

7.4CVSS0.00307EPSS
SaveExploits1References4
NVD
NVD
•added 2025/01/10 5:15 p.m.•28 views

CVE-2024-54849

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS0.00371EPSS
SaveExploits1References2
NVD
NVD
•added 2025/01/10 5:15 p.m.•43 views

CVE-2024-54847

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman DH parameters and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS0.00462EPSS
SaveExploits1References3
OSV
OSV
•added 2025/01/10 5:15 p.m.•15 views

CVE-2024-54849

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS5.8AI score0.01522EPSS
SaveExploits1References2
OSV
OSV
•added 2025/01/10 5:15 p.m.•26 views

CVE-2024-54847

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman DH parameters and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS6.7AI score0.03047EPSS
SaveExploits1References3
NVD
NVD
•added 2025/01/10 5:15 p.m.•36 views

CVE-2024-54846

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS0.00462EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•29 views

CVE-2024-54849

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack...

0.00371EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/01/10 12:00 a.m.•7 views

CVE-2024-54846

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack...

5.7AI score0.00462EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•28 views

CVE-2024-54848

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

0.00307EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/10 12:00 a.m.•83 views

CVE-2024-54848

The CP Plus CP-VNR-3104 network video recorder (specifically version B3223P22C02424 ) is vulnerable to an issue caused by the improper handling and storage of certificates . This flaw allows an attacker to decrypt communications or perform man-in-the-middle attacks . While no official patch versi...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2025/01/10 12:00 a.m.•84 views

CVE-2024-54846

The CP Plus CP-VNR-3104 network video recorder (version B3223P22C02424 ) is vulnerable to an issue that allows an attacker to obtain the EC private key . Successful exploitation can lead to the access of sensitive data or the execution of a man-in-the-middle attack , potentially compromising the ...

5.9CVSS6.9AI score0.00462EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•16 views

CP Plus CP-VNR-3104 安全漏洞

The CP Plus CP-VNR-3104 is a network video recorder from CP Plus. A security vulnerability exists in CP Plus CP-VNR-3104 version B3223P22C02424. An attacker could exploit this vulnerability to obtain an EC private key and access sensitive data or perform a man-in-the-middle attack...

5.9CVSS6.2AI score0.01522EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•14 views

CP Plus CP-VNR-3104 安全漏洞

The CP Plus CP-VNR-3104 is a network video recorder from CP Plus. A security vulnerability exists in CP Plus CP-VNR-3104 version B3223P22C02424. An attacker could exploit this vulnerability to obtain a second RSA private key and access sensitive data or perform a man-in-the-middle attack...

5.9CVSS6.2AI score0.01522EPSS
SaveExploits1References2
Rows per page
Query Builder