Lucene search
K

20 matches found

Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.8 views

PT-2026-41204

Name of the Vulnerable Software and Affected Versions electerm versions prior to 3.9.5 Description Insecure sync encryption occurs due to the use of deterministic AES-192-CBC with a fixed zero IV Initialization Vector, a constant KDF Key Derivation Function salt, and the absence of a MAC Message...

9.1CVSS5.8AI score0.00105EPSS
Exploits0References8
Packet Storm News
Packet Storm News
added 2026/03/19 12:0 a.m.3 views

Quantifying Memory Cells Vulnerability for DRAM Security

Dynamic Random Access Memory DRAM is pervasive in computer systems. Cell vulnerabilities caused by unintended phenomena forced retention failure, latency alteration, rowhammer and rowpress lead to unintended bit flips in memory. These phenomena have been explored as attacks to violate data...

5.8AI score
Exploits0
CVE
CVE
added 2025/12/04 9:47 p.m.9 views

CVE-2025-13940

WatchGuard Fireware OS contains an Expected Behavior Violation (CWE-440) vulnerability (CVE-2025-13940) that could allow bypass of the boot-time system integrity check and prevent Firebox shutdown in the event of a failure. Affected versions are Fireware OS 12.8.1–12.11.4 and 2025.1–2025.1.2. The...

6.7CVSS6.5AI score0.00105EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-0165

Malware in sbrugna...

7.4CVSS7.3AI score0.01714EPSS
Exploits1References17
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-20854

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00171EPSS
Exploits0References1
OSV
OSV
added 2023/12/19 12:15 a.m.1 views

DEBIAN-CVE-2023-6918

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

5.3CVSS6.6AI score0.01421EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2023/12/18 11:27 p.m.59 views

CVE-2023-6918

A flaw was found in the libssh implements abstract layer for message digest MD operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the...

5.3CVSS6AI score0.01421EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:28 a.m.4 views

SUSE CVE-2014-3567

Memory leak in the tlsdecryptticket function in t1lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service memory consumption via a crafted session ticket that triggers an integrity-check failure...

7.1CVSS8.2AI score0.23598EPSS
Exploits0References16
CNVD
CNVD
added 2022/11/30 12:0 a.m.8 views

D-Link DNR-322L Command Injection Vulnerability

The D-Link DNR-322L is a surveillance memory from D-Link. A command injection vulnerability exists in D-Link DNR-322L version 2.60B15 and earlier, which stems from a data integrity failure in the backup configuration and can be exploited by an authenticated attacker to execute OS-level commands o...

8.8CVSS7.5AI score0.31328EPSS
Exploits3References1
Prion
Prion
added 2022/11/29 5:15 a.m.27 views

Command injection

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

6.5CVSS8.8AI score0.31328EPSS
Exploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/29 12:0 a.m.9 views

CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

9AI score0.31328EPSS
Exploits3References1
CVE
CVE
added 2022/11/29 12:0 a.m.93 views

CVE-2022-40799

CVE-2022-40799 affects D-Link DNR-322L firmware, where a data integrity failure in the Backup Config feature (Version

8.8CVSS8.8AI score0.31328EPSS
In wildExploits3References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/27 12:0 a.m.3 views

PT-2022-5875 · D Link · D-Link Dnr-322L

Name of the Vulnerable Software and Affected Versions: D-Link DNR-322L versions 2.60B15 and earlier Description: The issue is related to a data integrity failure in the 'Backup Config' feature, allowing an authenticated attacker to execute OS level commands on the device. This can be exploited by...

9CVSS8.8AI score0.31328EPSS
Exploits3References11
OSV
OSV
added 2022/04/23 12:40 a.m.3 views

GHSA-V62P-CJV8-35XH Tahoe-LAFS fails to ensure integrity

Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval...

7.4CVSS7.4AI score0.01714EPSS
Exploits1References9
OSV
OSV
added 2021/11/15 10:15 a.m.4 views

CVE-2021-41289

ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attackers can modify the BIOS by replacing or filling in the content of the designated Memory DataBuffer, which causing a failure of integrity...

6.3CVSS5.8AI score0.00198EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.3 views

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism, related to integer overflow of the value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS6.7AI score0.27246EPSS
Exploits0References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.3 views

The vulnerability of the Samba networking communication package arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

7.5CVSS7AI score0.11181EPSS
Exploits3References5Affected Software2
UbuntuCve
UbuntuCve
added 2019/11/07 6:15 p.m.24 views

CVE-2012-0051

Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval...

7.4CVSS7.1AI score0.01714EPSS
Exploits1References1
OSV
OSV
added 2019/11/07 6:15 p.m.2 views

PYSEC-2019-253

Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval...

7.4CVSS7.1AI score0.01714EPSS
Exploits1References14
CVE
CVE
added 2019/11/07 5:23 p.m.50 views

CVE-2012-0051

Technical details about CVE-2012-0051 are not publicly provided in the supplied connected documents. Monitor for updates from vendors and security advisories.

7.4CVSS7.4AI score0.01714EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder