Lucene search
K

191 matches found

CNNVD
CNNVD
added 2024/11/05 12:0 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the net: fec module to properly handle PTP state saving when dealing with unsupported PTPs,...

5.5CVSS6.5AI score0.00027EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/08/05 12:0 a.m.2 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which arises from an out-of-bounds read vulnerability contained in the WLAN Host Communication module...

7.5CVSS6.6AI score0.00145EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/05 12:0 a.m.3 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from a post-release reuse vulnerability contained in the WLAN Host module...

7.5CVSS6.6AI score0.00399EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/05 12:0 a.m.2 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from an out-of-bounds read vulnerability contained in the WLAN Host module...

7.5CVSS6.5AI score0.00399EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/06/24 12:0 a.m.2 views

The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340 and its network modules, Modicon M340 BMXNOE0100, Modicon M340 BMXNOE0110, stems from the use of files and directories accessible to external parties. This allows attackers to disrupt the device’s firmware updates and cause improper operation of the web server.

The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controller Modicon M340, as well as its network modules Modicon M340 BMXNOE0100 and Modicon M340 BMXNOE0110, stems from the use of files and directories accessible to external parties. Exploiting this...

6.5CVSS5.4AI score0.00119EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/21 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a post-release reuse vulnerability in the net:USB module...

5.5CVSS6.1AI score0.00014EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/03/15 12:0 a.m.2 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue with the TLS device shutdown and startup of the net module...

7.8CVSS7.6AI score0.00021EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/02/27 12:0 a.m.2 views

The vulnerability of the tls_decrypt_done function in the Linux kernel’s net/tls/tls_sw.c file, which allows a hacker to trigger a service failure

The vulnerability of the tlsdecryptdone function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.3AI score0.00025EPSS
Exploits0References53Affected Software7
CNNVD
CNNVD
added 2024/02/21 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the net module calling asynchronous callbacks twice under certain circumstances. No details of the...

5.5CVSS6.6AI score0.00033EPSS
Exploits0References3
CNVD
CNVD
added 2024/02/02 12:0 a.m.11 views

Google Chrome Network module memory misreference vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Network module, which stems from a confusion in the instructions responsible for freeing memory in the Network module. An attacker can exploit this vulnerability to...

8.8CVSS7.2AI score0.00794EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/02/01 12:42 a.m.1 views

SUSE CVE-2021-33630

NULL Pointer Dereference vulnerability in openEuler kernel on Linux network modules allows Pointer Manipulation. This vulnerability is associated with program files net/sched/schcbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3...

5.5CVSS8AI score0.00077EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/30 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Network module, which stems from a confusion in the instructions responsible for freeing memory in the Network module. An attacker can exploit this vulnerability to...

8.8CVSS7.6AI score0.00794EPSS
Exploits0References6
OSV
OSV
added 2024/01/18 3:15 p.m.1 views

DEBIAN-CVE-2021-33630

NULL Pointer Dereference vulnerability in openEuler kernel on Linux network modules allows Pointer Manipulation. This vulnerability is associated with program files net/sched/schcbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3...

5.5CVSS6.7AI score0.00077EPSS
Exploits0References1
OSV
OSV
added 2024/01/18 3:15 p.m.1 views

UBUNTU-CVE-2021-33630

NULL Pointer Dereference vulnerability in openEuler kernel on Linux network modules allows Pointer Manipulation. This vulnerability is associated with program files net/sched/schcbs.C. This issue affects openEuler kernel: from 4.19.90 before 4.19.90-2401.3...

5.5CVSS7.1AI score0.00077EPSS
Exploits0References3
OSV
OSV
added 2023/11/02 8:53 p.m.25 views

GHSA-JHWW-FX2J-3RF7 FoodCoopShop Server-Side Request Forgery vulnerability

There is a potential SSRF vulnerability in foodcoopshop. Since there is no security policy on your Github, I tried to use the emails to contact you. The potential issue is in the Network module, where a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a...

8.1CVSS7.6AI score0.00196EPSS
Exploits0References6
NVD
NVD
added 2023/11/02 3:15 p.m.11 views

CVE-2023-46725

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a request to an...

8.1CVSS8AI score0.00196EPSS
Exploits0References4
Prion
Prion
added 2023/11/02 3:15 p.m.12 views

Server side request forgery (ssrf)

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a request to an...

4.6CVSS7.4AI score0.00196EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/11/02 2:19 p.m.19 views

CVE-2023-46725 FoodCoopShop Server-Side Request Forgery vulnerability

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a request to an...

8.1CVSS8.2AI score0.00196EPSS
Exploits0References4
OSV
OSV
added 2023/11/02 2:19 p.m.14 views

CVE-2023-46725 FoodCoopShop Server-Side Request Forgery vulnerability

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a request to an...

8.1CVSS7.5AI score0.00196EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2023/11/02 2:19 p.m.18 views

CVE-2023-46725 FoodCoopShop Server-Side Request Forgery vulnerability

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the /api/updateProducts.json endpoint to make the server send a request to an...

8.1CVSS6.7AI score0.00196EPSS
Exploits0References4
Rows per page
Query Builder