Lucene search
+L

28947 matches found

Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•37 views

CVE-2024-54847

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman DH parameters and access sensitive data or execute a man-in-the-middle attack...

0.00468EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/01/10 12:00 a.m.•7 views

CVE-2024-54846

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack...

5.7AI score0.00468EPSS
SaveExploits1References3
CVE
CVE
•added 2025/01/10 12:00 a.m.•87 views

CVE-2024-54847

The CP Plus CP-VNR-3104 network video recorder, specifically version B3223P22C02424 , is vulnerable to an issue involving Improper Certificate Validation (CWE-295). Attackers can exploit this to access Diffie-Hellman (DH) parameters , which may lead to the exposure of sensitive data or facilitate...

5.9CVSS7AI score0.00468EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/10 12:00 a.m.•14 views

CVE-2024-54847

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman DH parameters and access sensitive data or execute a man-in-the-middle attack...

5.7AI score0.00468EPSS
SaveExploits1References3
CVE
CVE
•added 2025/01/10 12:00 a.m.•71 views

CVE-2024-54849

The CP Plus CP-VNR-3104 network video recorder, specifically version B3223P22C02424 , is susceptible to a security vulnerability involving improper certificate validation (CWE-295). An attacker can exploit this flaw to obtain a second RSA private key , which can lead to the access of sensitive da...

5.9CVSS6.9AI score0.00376EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•29 views

CVE-2024-54849

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack...

0.00376EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/01/10 12:00 a.m.•18 views

CVE-2024-54848

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

7.4AI score0.00311EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•30 views

CVE-2024-54846

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack...

0.00468EPSS
SaveExploits1References3
CVE
CVE
•added 2025/01/10 12:00 a.m.•84 views

CVE-2024-54846

The CP Plus CP-VNR-3104 network video recorder (version B3223P22C02424 ) is vulnerable to an issue that allows an attacker to obtain the EC private key . Successful exploitation can lead to the access of sensitive data or the execution of a man-in-the-middle attack , potentially compromising the ...

5.9CVSS6.9AI score0.00468EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•3 views

CVE-2024-54846: Improper Certificate Validation

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS5.9AI score0.00468EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•5 views

CVE-2024-54848: Improper Certificate Validation

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

7.4CVSS5.9AI score0.00311EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•2 views

CVE-2024-54847: Improper Certificate Validation

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman DH parameters and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS5.9AI score0.00468EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•4 views

CVE-2024-54849: Improper Certificate Validation

An issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private key and access sensitive data or execute a man-in-the-middle attack...

5.9CVSS5.9AI score0.00376EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•17 views

CP Plus CP-VNR-3104 Security Vulnerability

The CP Plus CP-VNR-3104 is a network video recorder from CP Plus. A security vulnerability exists in the CP Plus CP-VNR-3104 version B3223P22C02424 that stems from improper handling and storage of certificates, which allows an attacker to decrypt communications or perform man-in-the-middle attack...

8.8CVSS7.7AI score0.80058EPSS
SaveExploits19References4
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•14 views

CP Plus CP-VNR-3104 Security Vulnerability

The CP Plus CP-VNR-3104 is a network video recorder from CP Plus. A security vulnerability exists in CP Plus CP-VNR-3104 version B3223P22C02424. An attacker could exploit this vulnerability to obtain a second RSA private key and access sensitive data or perform a man-in-the-middle attack...

5.9CVSS6.2AI score0.01522EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•26 views

Arista NG Firewall security vulnerabilities

Arista NG Firewall is a WEB firewall from Arista Corporation. A security vulnerability exists in Arista NG Firewall, which stems from the vulnerability of backups uploaded to ETM to be intercepted by a man-in-the-middle...

8.3CVSS6.7AI score0.00354EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•15 views

CP Plus CP-VNR-3104 Security Vulnerability

The CP Plus CP-VNR-3104 is a network video recorder from CP Plus. A security vulnerability exists in CP Plus CP-VNR-3104 version B3223P22C02424. An attacker could exploit the vulnerability to access Diffie-Hellman DH parameters and access sensitive data or perform a man-in-the-middle attack...

5.9CVSS6.6AI score0.03047EPSS
SaveExploits1References3
HackRead
HackRead
•added 2025/01/09 3:28 p.m.•16 views

Cybersecurity Risks in Crypto: Phishing, Ransomware and Other Emerging Threats

Explore top cybersecurity risks in crypto, including phishing, ransomware, and MitM attacks. Learn practical tips to safeguard your…...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•19 views

PT-2025-3079

Name of the Vulnerable Software and Affected Versions CP Plus CP-VNR-3104 B3223P22C02424 affected versions not specified Description An issue allows attackers to obtain the second RSA private key, potentially accessing sensitive data or executing a man-in-the-middle attack. Recommendations At the...

5.9CVSS6.2AI score0.00376EPSS
SaveExploits1References11
Veracode
Veracode
•added 2025/01/08 1:50 a.m.•28 views

Unsafe SSL Verification

tecnickcom/tcpdf is vulnerable to Unsafe SSL verification. The vulnerability is due to improper handling of SSL verification settings in TCPDF when using libcurl, where CURLOPTSSLVERIFYHOST and CURLOPTSSLVERIFYPEER are set unsafely. It allows an attacker to perform a Man-in-the-Middle MitM attack...

9.8CVSS7AI score0.00785EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder