Lucene search
+L

6347 matches found

RedhatCVE
RedhatCVE
•added 2025/02/04 11:32 p.m.•12 views

CVE-2024-48839

Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

10CVSS7.2AI score0.02827EPSS
SaveExploits10References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:32 p.m.•17 views

CVE-2024-48840

Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

10CVSS7.5AI score0.0206EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
•added 2025/02/02 12:00 a.m.•6 views

VulnCheck KEV: CVE-2024-6298

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows Attacker to execute arbitrary code remotely...

10CVSS6.2AI score0.1901EPSS
SaveIn wildExploits4References4
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•21 views

Google Pixel和Google Nexus 安全漏洞

Google Pixel and Google Nexus are both a smartphone from Google USA. Google Pixel and Google Nexus have a security vulnerability that stems from an integer overflow that results in out-of-bounds reads. An attacker exploiting the vulnerability can leak sensitive information...

5.7CVSS7.7AI score0.00131EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•18 views

Google Pixel和Google Nexus 安全漏洞

Google Pixel and Google Nexus are both a smartphone from Google USA. Google Pixel and Google Nexus have a security vulnerability that stems from improper input validation, leading to out-of-bounds reads. An attacker exploiting the vulnerability can leak sensitive information...

5.7CVSS7.5AI score0.00131EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•17 views

Google Pixel和Google Nexus 安全漏洞

Google Pixel and Google Nexus are both a smartphone from Google USA. Google Pixel and Google Nexus have a security vulnerability that stems from uninitialized data. An attacker exploiting the vulnerability can leak sensitive information...

6.2CVSS9AI score0.00085EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/17 12:00 a.m.•17 views

Google Pixel和Google Nexus 代码问题漏洞

Google Pixel and Google Nexus are both a smartphone from the American company Google Google. Google Pixel and Google Nexus have a security vulnerability. An attacker exploiting the vulnerability can view thumbnails of deleted photos...

5.5CVSS9AI score0.00099EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/17 12:00 a.m.•17 views

Google Pixel和Google Nexus 输入验证错误漏洞

Google Pixel and Google Nexus are both a smartphone from Google USA. A security vulnerability exists in Google Pixel and Google Nexus. Attackers can escalate privileges by exploiting the vulnerability...

7.8CVSS7.6AI score0.00096EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/01/17 12:00 a.m.•17 views

Google Pixel和Google Nexus 安全漏洞

Google Pixel and Google Nexus are both a smartphone from Google USA. Google Pixel and Google Nexus have a security vulnerability that stems from a code logic error that leads to a local denial of service...

10CVSS7.7AI score0.00158EPSS
SaveExploits0References2
Zero Science Lab
Zero Science Lab
•added 2025/01/10 12:00 a.m.•516 views

ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) Stored Cross-Site Scripting

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB BMS/BAS controller suffers from an authenticated stored...

9.3CVSS7.5AI score0.01076EPSS
SaveExploits7
zdt
zdt
•added 2025/01/09 12:00 a.m.•631 views

ABB Cylon Aspect 3.08.02 bbmdUpdate.php Remote Code Execution Vulnerability

ABB Cylon Aspect version 3.08.02 suffers from an authenticated blind command injection vulnerability. Input passed to several POST parameters is not properly sanitized when writing files, allowing attackers to execute arbitrary shell commands on the system. There is also an off-by-one error in...

9.3CVSS9.9AI score0.02827EPSS
SaveExploits17
zdt
zdt
•added 2025/01/01 12:00 a.m.•300 views

ABB Cylon Aspect 3.08.03 webServerDeviceLabelUpdate.php Denial of Service Vulnerability

ABB Cylon Aspect version 3.08.03 suffers from an authenticated arbitrary content injection vulnerability in the webServerDeviceLabelUpdate.php script due to a lack of input validation. Authenticated attackers can exploit the deviceLabel POST parameter to write arbitrary content to a fixed file...

7.5AI score
SaveExploits0
Circl
Circl
•added 2024/12/17 6:41 a.m.•8 views

CISCO-SA-20181017-NEXUS

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794716343219...

7.2AI score
SaveExploits0References1
Circl
Circl
•added 2024/12/17 6:41 a.m.•9 views

CISCO-SA-20190828-NEXUS

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:44+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793573300788...

7.2AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/12/12 4:05 a.m.•611 views

Exploit for CVE-2024-4956

CVE-2024-4956 CVE-2024-4956 is a serious path traversal vulne...

7.5CVSS7AI score0.18245EPSS
SaveExploits17
BDU FSTEC
BDU FSTEC
•added 2024/12/12 12:00 a.m.•24 views

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems arises from improper validation of certain types of input data. This allows intruders to introduce incorrect input data into the system.

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper validation of certain types of input data. Exploiting this vulnerability can allow an attacker to introduce incorrect input data...

10CVSS7.7AI score0.01813EPSS
SaveExploits4References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/12/12 12:00 a.m.•18 views

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series, related to the transmission of data in an open manner, allows attackers to disclose protected information.

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

9.6CVSS5.4AI score0.00395EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/12/12 12:00 a.m.•24 views

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series lies in improper code generation, allowing attackers to execute arbitrary codes.

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8.2AI score0.02827EPSS
SaveExploits10References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/12/10 12:00 a.m.•23 views

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems is related to insufficiently checked incoming requests. This allows unauthorized access by intruders, enabling them to disclose protected information.

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to insufficient checking of incoming requests. Exploiting this vulnerability can allow an intruder to gain unauthorized access to resources and...

9.9CVSS5.4AI score0.00497EPSS
SaveExploits1References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/12/10 12:00 a.m.•19 views

The vulnerability of microprogrammed software in embedded network control controllers for building automation systems, such as ASPECT Enterprise, NEXUS Series, and MATRIX Series, arises from improper validation of certain types of input data. This allows unauthorized access by attackers to the device.

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper validation of certain types of input data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized acces...

10CVSS5.4AI score0.00446EPSS
SaveExploits0References2Affected Software4
Rows per page
Query Builder