Lucene search
+L

504 matches found

OSV
OSV
added 2024/08/21 12:15 a.m.55 views

UBUNTU-CVE-2024-43862

In the Linux kernel, the following vulnerability has been resolved: net: wan: fslqmchdlc: Convert carrierlock spinlock to a mutex The carrierlock spinlock protects the carrier detection. While it is held, framergetstatus is called which in turn takes a mutex. This is not correct and can lead to a...

5.5CVSS5.7AI score0.00141EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2024/08/20 11:45 p.m.88 views

CVE-2024-43862

In the Linux kernel, the following vulnerability has been resolved: net: wan: fslqmchdlc: Convert carrierlock spinlock to a mutex The carrierlock spinlock protects the carrier detection. While it is held, framergetstatus is called which in turn takes a mutex. This is not correct and can lead to a...

5.5CVSS5.4AI score0.00141EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/08/20 11:45 p.m.52 views

CVE-2024-43862 net: wan: fsl_qmc_hdlc: Convert carrier_lock spinlock to a mutex

In the Linux kernel, the following vulnerability has been resolved: net: wan: fslqmchdlc: Convert carrierlock spinlock to a mutex The carrierlock spinlock protects the carrier detection. While it is held, framergetstatus is called which in turn takes a mutex. This is not correct and can lead to a...

0.00141EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/30 12:00 a.m.13 views

PT-2024-30719 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically with the fsl qmc hdlc module. The carrier lock spinlock protects the carrier detection, but while it is held, framer get status i...

7.5CVSS5.2AI score0.00141EPSS
SaveExploits0References17
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:49 p.m.6 views

Malicious code in awesome-print_carrier_wave_uploader (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:30 p.m.5 views

Malicious code in carrier-portal-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:30 p.m.9 views

MAL-2024-1863 Malicious code in carrier-portal-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2024/05/01 1:15 p.m.33 views

CVE-2024-27063

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

5.5CVSS5.7AI score0.00222EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2024/05/01 1:00 p.m.40 views

CVE-2024-27063 leds: trigger: netdev: Fix kernel panic on interface rename trig notify

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: netdev: Fix kernel panic on interface rename trig notify Commit d5e01266e7f5 "leds: trigger: netdev: add additional specific link speed mode" in the various changes, reworked the way to set the LINKUP mode in commi...

6.5AI score0.00222EPSS
SaveExploits0References4
CVE
CVE
added 2024/05/01 1:00 p.m.7251 views

CVE-2024-27063

CVE-2024-27063 affects the Linux kernel LED subsystem for leds: trigger: netdev. The issue stems from a refactor where the trigger_data’s dev could reference the old net_dev while a new net_dev is being established, causing get_device_state() to operate on an invalid net_dev and potentially trigg...

5.5CVSS6.5AI score0.00222EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
added 2024/04/11 3:21 a.m.15 views

carrier.com.ar Cross Site Scripting vulnerability OBB-3913936

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Cvelist
Cvelist
added 2024/03/16 12:00 a.m.27 views

CVE-2023-36483 MAS (a Carrier brand) MASmobile Classic Authorization Bypass

Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data including customer data, security system status, and event history...

6.5CVSS6.5AI score0.00491EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/16 12:00 a.m.97 views

CVE-2023-36483

CVE-2023-36483 involves an authorization bypass in Carrier MASmobile Classic, exploitable via session ID prediction. Affected products are MASmobile Classic for Android (versions 1.16.18 and earlier) and MASmobile Classic for iOS (versions 1.7.24 and earlier). The root cause is an authorization b...

6.5CVSS5.5AI score0.00491EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2024/03/16 12:00 a.m.17 views

Carrier MASmobile Security Breach

Carrier MASmobile is a dedicated MASterMind service from Carrier Corporation of America. It allows authorized central station personnel and dealers to use mobile devices to manage customer data, turn system tests on or off, and view system event history, test history and system zones. A security...

6.5CVSS6.7AI score0.00491EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/11 5:15 p.m.12 views

CVE-2024-0046

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00122EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/11 5:15 p.m.22 views

CVE-2024-0046

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.7AI score0.00122EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/11 5:15 p.m.24 views

Design/Logic Flaw

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score0.00122EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/11 5:15 p.m.12 views

UBUNTU-CVE-2024-0046

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00122EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/03/11 5:15 p.m.25 views

CVE-2024-0046

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/11 4:35 p.m.42 views

CVE-2024-0046

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7AI score0.00122EPSS
SaveExploits0References2
Rows per page
Query Builder