Lucene search
+L

14693 matches found

CNNVD
CNNVD
•added 2022/01/27 12:00 a.m.•25 views

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

7.8CVSS5.6AI score0.00739EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/27 12:00 a.m.•18 views

Cesanta MJS security vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

5.5CVSS5.6AI score0.00614EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/27 12:00 a.m.•28 views

Cesanta MJS security vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...

5.5CVSS5.6AI score0.00614EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/25 12:00 a.m.•24 views

Embedthis Software GoAhead security vulnerabilities

Embedthis Software GoAhead is an embedded Web server from Embedthis Software. A security vulnerability exists in Embedthis Software GoAhead, which stems from the fact that the code that performs password matching during "basic" HTTP authentication does not use the constant time memcmp and is not...

9.8CVSS7.9AI score0.02256EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/01/25 12:00 a.m.•23 views

Router Software Command Injection

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, EX6420, RBS10, RBS20, RBS40...

9.6CVSS8.1AI score0.0202EPSS
SaveExploits0References3Affected Software36
CNVD
CNVD
•added 2022/01/24 12:00 a.m.•61 views

Moddable SDK has an unspecified vulnerability (CNVD-2022-08201)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. A security vulnerability exists in Moddable SDK v11.5.0, which was discovered to contain a SEGV vulnerability via the xs source xarray .c in the fx Array prototype sorting. No details of the...

5.5CVSS2.7AI score0.00717EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/24 12:00 a.m.•60 views

Unspecified vulnerability in Moddable SDK (CNVD-2022-08281)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. and XS is one of the embedded JavaScript engines. A security vulnerability exists in Moddable SDK, which stems from a SEGV vulnerability discovered in Moddable SDK v11.5.0 via the xs source...

5.5CVSS5.5AI score0.00717EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/24 12:00 a.m.•66 views

Moddable SDK buffer overflow vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. a security vulnerability exists in Moddable SDK v11.5.0, which stems from an invalid memory access in component asanmemmove. No details of the vulnerability are currently available...

5.5CVSS3.4AI score0.00717EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/24 12:00 a.m.•50 views

Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15483)

Oracle Java SE, an Oracle company, is used to develop and deploy Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to cause unauthorized read access to a subse...

5.3CVSS3AI score0.02877EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/24 12:00 a.m.•44 views

Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15489)

Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to potentially cause an...

5.3CVSS3.1AI score0.03765EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•65 views

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2022-08375)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. Moddable SDK in version 11.5.0 has a heap buffer overflow vulnerability, which stems from xs/sources/xsDataView.c in fxUint8Getter in the memory buffer vulnerability has an incorrect restrictio...

7.8CVSS3.2AI score0.00953EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•77 views

Moddable SDK Stack Buffer Overflow Vulnerability

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from the US company Moddable. The Moddable SDK has a stack buffer overflow vulnerability in v11.5.0 that stems from a boundary error in the component interceptorstrcat when handling untrusted input. A...

7.8CVSS8AI score0.00831EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•54 views

Moddable SDK Denial of Service Vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. A denial of service vulnerability exists in Moddable SDK v11.5.0, which stems from the presence of a NULL pointer dereference. An attacker could exploit this vulnerability to cause a denial of...

5.5CVSS3.7AI score0.00784EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/23 12:00 a.m.•57 views

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2022-08216)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. Moddable SDK in v11.5.0 is vulnerable to a heap buffer overflow vulnerability stemming from a boundary error in component libcstartmain when handling untrusted input. A remote attacker could...

7.8CVSS3.6AI score0.00771EPSS
SaveExploits1References1
osv_rustsec
osv_rustsec
•added 2022/01/22 12:00 p.m.•25 views

RUSTSEC-2022-0005 crate has been renamed to `ftdi-embedded-hal`

This crate has been renamed from ftd2xx-embedded-hal to ftdi-embedded-hal. The new repository location is:...

7.1AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2022/01/22 12:00 p.m.•8 views

bme280-multibus (>=0.1.0, <=0.2.1), eeprom25aa02e48 (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via ftd2xx-embedded-hal (>=0.1.0, <=0.9.1)

ftd2xx-embedded-hal CARGO version =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0005...

5.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/22 12:00 a.m.•3 views

PT-2022-37412

Name of the Vulnerable Software and Affected Versions ftdi-embedded-hal affected versions not specified Description The crate has been renamed from ftd2xx-embedded-hal to ftdi-embedded-hal. The new repository location is provided. Recommendations At the moment, there is no information about a new...

5.6AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2022/01/20 5:15 p.m.•12 views

CVE-2021-44734

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device...

10CVSS7.9AI score0.06215EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/01/20 5:15 p.m.•23 views

CVE-2021-44734

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device...

9.8CVSS7.9AI score0.06215EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/01/20 5:15 p.m.•29 views

CVE-2021-44735

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07...

9.8CVSS7.3AI score0.07025EPSS
SaveExploits0References4
Rows per page
Query Builder