Lucene search
+L

3787 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/24 12:00 a.m.•6 views

CVE-2024-26605: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlock when enabling ASPM A last minute revert in 6.7-final introduced a potential deadlock when enabling ASPM during probe of Qualcomm PCIe controllers as reported by lockdep:...

5.5CVSS5.8AI score0.00208EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•15 views

Intel Ethernet Adapters and Intel Ethernet Controller I225 Manageability firmware security vulnerability

Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation, USA. Intel Ethernet Adapters are Ethernet adapters. Intel Ethernet Controllers are Ethernet controllers. Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation. A security...

5.3CVSS6.5AI score0.00546EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/14 4:52 p.m.•89 views

CVE-2023-6408

Summary (CVE-2023-6408) : The vulnerability is in Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340/M580 PLCs, caused by improper enforcement of message integrity during transmission in a communication channel . This enables a Man-in-the-Middle attack tha...

8.1CVSS7.8AI score0.00317EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/02/14 2:15 p.m.•41 views

CVE-2023-28396

Improper access control in firmware for some IntelR ThunderbolTM Controllers versions before 41 may allow a privileged user to enable denial of service via local access...

6.1CVSS6AI score0.00166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 1:37 p.m.•18 views

CVE-2023-28396

Improper access control in firmware for some IntelR ThunderbolTM Controllers versions before 41 may allow a privileged user to enable denial of service via local access...

6.1CVSS6.8AI score0.00166EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•4 views

CVE-2023-28396: Improper Access Control

Improper access control in firmware for some IntelR ThunderbolTM Controllers versions before 41 may allow a privileged user to enable denial of service via local access...

6.1CVSS5.7AI score0.00166EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•23 views

Intel Thunderbolt Controllers Security Vulnerability

Intel Thunderbolt controller is a connector standard published by Intel, a U.S.-based company, that supports both copper and fiber-optic media and is intended to be used as a common bus between computers and other devices. A security vulnerability previously existed in Intel ThunderboltTM...

6.1CVSS6.3AI score0.00166EPSS
SaveExploits0References2
Hewlett-Packard
Hewlett-Packard
•added 2024/02/13 12:00 a.m.•43 views

Intel Thunderbolt Controller February 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Thunderbolt™ Controllers, which might allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...

6.1CVSS7.2AI score0.00166EPSS
SaveExploits0Affected Software2
Positive Technologies
Positive Technologies
•added 2024/02/13 12:00 a.m.•16 views

PT-2024-2223 · Intel · Intel Thunderbolt Controllers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM Controllers versions prior to 41 Description: The issue is related to improper access control in the firmware of some IntelR ThunderboltTM Controllers, which may allow a privileged user to enable denial of service via loc...

6.1CVSS5.8AI score0.00166EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•21 views

AMI MegaRAC SP-X Software Compromise

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

9.6CVSS7.8AI score0.00308EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/02 12:00 a.m.•11 views

CVE-2024-1198: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserialization. It is possible to launch the atta...

9.8CVSS5.2AI score0.00731EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/23 12:00 a.m.•28 views

Axis Communications Network Door Controllers and Intercoms Denial of Service (CVE-2023-21405)

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors...

6.5CVSS6.6AI score0.00296EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•24 views

Omron PLC Access Control Error Vulnerability

Omron PLC CJ series and so on are products of Omron Japan.Omron PLC CJ series is a CJ series Programmable Logic Controller PLC.Omron PLC CS series is a CS series Programmable Logic Controller PLC.Omron PLC NJ series is a NJ series programmable logic controller. An Access Control Error vulnerabili...

8.6CVSS6.8AI score0.00536EPSS
SaveExploits0References4
NVD
NVD
•added 2024/01/08 7:15 a.m.•31 views

CVE-2024-22216

In default installations of Microchip maxView Storage Manager for Adaptec Smart Storage Controllers where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 exce...

10CVSS9.2AI score0.00528EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/08 7:15 a.m.•36 views

Information disclosure

In default installations of Microchip maxView Storage Manager for Adaptec Smart Storage Controllers where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 exce...

7.5CVSS6.9AI score0.00528EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/01/08 12:00 a.m.•78 views

CVE-2024-22216

CVE-2024-22216 affects Microchip maxView Storage Manager (Adaptec Smart Storage Controllers). The vulnerability resides in the Redfish server handling in versions 3.00.23484 through 4.14.00.26064, with older builds prior to 3.07.23980 and 4.07.00.25339 also affected. The issue allows unauthorized...

10CVSS9AI score0.00528EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/02 3:19 a.m.•4 views

Malware in unit-testing-controllers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/12/30 6:27 a.m.•9 views

Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/12/30 6:27 a.m.•27 views

MAL-2023-8774 Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/30 12:00 a.m.•31 views

CVE-2023-52264

The beesblog aka Bees Blog component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharingurl is mishandled...

6.1AI score
SaveExploits0References5
Rows per page
Query Builder