Lucene search
+L

882 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:48 p.m.•15 views

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

7.5CVSS7.4AI score0.02396EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:09 p.m.•17 views

CVE-2022-39084

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

6.7CVSS6.8AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:06 p.m.•22 views

CVE-2022-39082

In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

6.7CVSS6.8AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:53 p.m.•20 views

CVE-2021-34995

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS8.5AI score0.68864EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 9:15 p.m.•18 views

CVE-2007-5550

Unspecified vulnerability in Cisco IOS allows remote attackers to obtain the IOS version via unspecified vectors involving a "common network service", aka PSIRT-1255024833. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from ...

5CVSS6AI score0.01588EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 6:10 p.m.•12 views

CVE-1999-0586

A network service is running on a nonstandard port...

5.8AI score0.01341EPSS
SaveExploits0References1
AlmaLinux
AlmaLinux
•added 2025/05/13 12:00 a.m.•19 views

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.3CVSS6.6AI score0.00726EPSS
SaveExploits0References4
osv_mal
osv_mal
•added 2025/04/30 9:54 p.m.•18 views

MAL-2025-191889 Malicious code in telepycore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3dcd0a2a8162a703ef9d7b90566e4c55116a7f4f4d3b8759ca0d2640acd4ee4 Package can only be used requires additional triggering to install a remote executable, ensure it starts on logon and name mimic network service. Though...

7AI score
SaveExploits0References7
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•20 views

CVE-2025-32870

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetTraces' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write...

8.7CVSS7.6AI score0.00757EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•21 views

CVE-2025-32866

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetLogs' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write t...

8.7CVSS7.6AI score0.00714EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•26 views

CVE-2025-32869

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'ImportCertificate' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from a...

8.7CVSS7.6AI score0.00456EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•26 views

CVE-2025-32865

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'CreateLog' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and write...

8.7CVSS7.6AI score0.00714EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•18 views

CVE-2025-32861

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

8.7CVSS7.6AI score0.00665EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•18 views

CVE-2025-32864

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'GetSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and wri...

8.7CVSS7.6AI score0.00714EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•14 views

CVE-2025-32858

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UpdateWebServerGatewaySettings' method. This could allow an authenticated remote attacker to bypass authorization controls, t...

8.7CVSS7.6AI score0.00665EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•18 views

CVE-2025-32856

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockBufferingSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read fr...

8.7CVSS7.6AI score0.00665EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•18 views

CVE-2025-32854

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockOpcSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

8.7CVSS7.6AI score0.00714EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/16 6:16 p.m.•23 views

CVE-2025-32851

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockTcmSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from a...

8.8CVSS0.00714EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•23 views

CVE-2025-32852

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'LockDatabaseSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read fro...

8.7CVSS7.6AI score0.00714EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 6:16 p.m.•17 views

CVE-2025-32849

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockSmtpSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from...

8.7CVSS7.6AI score0.00714EPSS
SaveExploits0References1
Rows per page
Query Builder