Lucene search
+L

3826 matches found

CNNVD
CNNVD
added 2024/07/09 12:0 a.m.10 views

outline Security breaches

outline is the US-based outline open source used to provide the fastest wiki and knowledge base for growing teams. A security vulnerability exists in outline v0.76.1 and earlier versions, which originated from a vulnerability that allows an attacker to perform a session hijacking attack via user...

8.8CVSS6.6AI score0.00739EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/07/09 12:0 a.m.17 views

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

7.1AI score0.00739EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2024/06/28 9:2 p.m.41 views

CVE-2024-29040

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

4.3CVSS5.1AI score0.00343EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/06/28 9:2 p.m.31 views

CVE-2024-29040 Fapi Verify Quote: Does not detect if quote was not generated by TPM

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

4.3CVSS6.8AI score0.00343EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/06/28 9:2 p.m.46 views

CVE-2024-29040

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

4.3CVSS5.7AI score0.00343EPSS
SaveExploits0
OSV
OSV
added 2024/06/25 12:40 p.m.6 views

MAL-2024-2245 Malicious code in down_load_epub_the_color_of_magic_1kl2my (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/06/24 9:15 p.m.15 views

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

4.1CVSS6AI score0.00413EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/24 9:15 p.m.27 views

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

9.8CVSS0.00534EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/24 9:15 p.m.28 views

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

4.1CVSS0.00413EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/24 9:15 p.m.8 views

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

9.8CVSS5.8AI score0.00534EPSS
SaveExploits1References1
CVE
CVE
added 2024/06/24 12:0 a.m.71 views

CVE-2024-38903

The CVE-2024-38903 entry concerns H3C Magic R230 V100R002, where the udpserver listens on TCP/UDP port 9034 and allows execution of arbitrary commands due to the server’s behavior. Affected product/version is H3C Magic R230 with V100R002. The public docs consistently describe the vulnerability as...

4.1CVSS7.9AI score0.00413EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/24 12:0 a.m.11 views

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

7.5AI score0.00534EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/24 12:0 a.m.12 views

PT-2024-28271 · H3C · H3C Magic R230

Name of the Vulnerable Software and Affected Versions: H3C Magic R230 version V100R002 Description: The issue allows attackers to execute arbitrary commands due to the udpserver opening port 9034. Recommendations: For H3C Magic R230 version V100R002, consider restricting access to port 9034 as a...

4.1CVSS8.2AI score0.00413EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/06/24 12:0 a.m.26 views

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

7.9AI score0.00413EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/24 12:0 a.m.7 views

PT-2024-28270 · H3C · H3C Magic R230

Name of the Vulnerable Software and Affected Versions: H3C Magic R230 version V100R002 Description: A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. Recommendations: For H3C Magic R230 version V100R002, consider changing the hardcoded passwor...

9.8CVSS7.4AI score0.00534EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.6 views

H3C Magic R230 安全漏洞

Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the Magic R230 V100R002 of Xinhua San Technologies Co. The vulnerability stems from a hard-coded password vulnerability in /etc/shadow, which can be exploited by an attacker to log in as root...

9.8CVSS6.9AI score0.00534EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/06/24 12:0 a.m.26 views

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

0.00534EPSS
SaveExploits1References1
CVE
CVE
added 2024/06/24 12:0 a.m.62 views

CVE-2024-38902

CVE-2024-38902 affects H3C Magic R230, specifically version V100R002. The description across sources confirms a hardcoded password in /etc/shadow that can allow an attacker to log in as root. Public records from NVD/Red Hat/CNVD/CVE entries corroborate the vulnerability details (no exploit specif...

9.8CVSS7.7AI score0.00534EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.12 views

H3C Magic R230 Security Vulnerability

H3C Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R230 V100R002 version, which originates from the udpserver opening port 9034 allowing an attacker to execute arbitrary commands...

4.1CVSS7.3AI score0.00413EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/06/24 12:0 a.m.49 views

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

0.00413EPSS
SaveExploits1References1
Rows per page
Query Builder