Lucene search
+L

250 matches found

Positive Technologies
Positive Technologies
added 2024/04/04 12:00 a.m.10 views

PT-2024-6464 · D Link · D-Link Dns-321 +16

Name of the Vulnerable Software and Affected Versions: D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 versions up to 20240814...

9.8CVSS7.1AI score0.07178EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
added 2024/04/02 12:00 a.m.16 views

Microsoft Windows 10 1803 Enterprise SEoL

Microsoft Windows 10 1803 Enterprise is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc...

5.4AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/03/21 2:51 a.m.7 views

CVE-2024-1202

Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass. This issue affects Octopod: before v1. NOTE: The vendor was contacted and it was learned that the product is not supported...

9.8CVSS5.8AI score0.00901EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/03/01 4:07 a.m.6 views

SUSE CVE-2021-47005

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for -getfeatures getfeatures ops of pciepcops may return NULL, causing NULL pointer dereference in pciepftestallocspace function. Let us add a check for pciepcfeature pointer in...

4.4CVSS5.8AI score0.00236EPSS
SaveExploits0References6
OSV
OSV
added 2024/02/28 9:15 a.m.29 views

DEBIAN-CVE-2021-47005

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for -getfeatures getfeatures ops of pciepcops may return NULL, causing NULL pointer dereference in pciepftestallocspace function. Let us add a check for pciepcfeature pointer in...

5.5CVSS5.4AI score0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/28 9:15 a.m.9 views

UBUNTU-CVE-2021-47005

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix NULL pointer dereference for -getfeatures getfeatures ops of pciepcops may return NULL, causing NULL pointer dereference in pciepftestallocspace function. Let us add a check for pciepcfeature pointer in...

5.5CVSS6.1AI score0.00236EPSS
SaveExploits0References7
Citrix
Citrix
added 2024/02/28 12:00 a.m.16 views

Failed to install Remote PowerShell SDK on Cloud Connector machine

Failed to install Remote PowerShell SDK on Cloud Connector machine. Error message "Connector Machine detected. SDK's cmdlets are not supported on Cloud Connectors." was shown...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/02/02 7:15 a.m.10 views

CVE-2024-23978

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported...

9.8CVSS6.2AI score0.0065EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/02 7:15 a.m.28 views

CVE-2024-21780

Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted command may result in a denial of service DoS condition. Note that the affected products are no longer supported...

7.5CVSS7.7AI score0.0065EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2023/11/23 9:30 p.m.153 views

openssl npm package vulnerable to command execution

The openssl aka node-openssl NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a verb field used for command execution. NOTE: This vulnerability only affects products that are no longer supported by t...

9.8CVSS6.9AI score0.01909EPSS
SaveExploits1References5Affected Software1
RedHat Linux
RedHat Linux
added 2023/11/07 9:03 a.m.16 views

kernel: bpf: Skip invalid kfunc call in backtrack_insn

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is not eliminated by dead code elimination. However, this can lead to t...

5.5CVSS6.8AI score0.00245EPSS
SaveExploits0References5
Fedora
Fedora
added 2023/10/21 1:29 a.m.46 views

[SECURITY] Fedora 38 Update: python2.7-2.7.18-35.fc38

Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especial ly how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...

9.8CVSS9.7AI score0.05065EPSS
SaveExploits3
Cvelist
Cvelist
added 2023/07/31 12:00 a.m.52 views

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

9.8AI score0.01464EPSS
SaveExploits0References2
Veeam
Veeam
added 2023/05/24 12:00 a.m.19 views

Veeam Explorer for Microsoft Teams Error: "Tab type is not supported"

Challenge The Tenants of a Service Provider, who has recently upgraded to Veeam Backup for Microsoft 365 version 7.0.0.3604 P20230512, may receive the following error when attempting to restore using Veeam Explorer for Microsoft Teams: Tab type is not supported. Cause This error occurs because th...

6.9AI score
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/02 5:08 a.m.27 views

CVE-2022-40508 Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...

7.5CVSS6.8AI score0.00383EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/02/21 6:30 p.m.25 views

Codiad information disclosure vulnerability

A vulnerability was found in Codiad 2.8.0. It has been rated as problematic. Affected by this issue is the function saveJSON of the file components/install/process.php. The manipulation of the argument data leads to information disclosure. The attack may be launched remotely. Upgrading to version...

7.5CVSS7.1AI score0.00676EPSS
SaveExploits0References7Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:56 a.m.6 views

SUSE CVE-2016-8678

The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted file. NOTE: the vendor says "This is a Q64 issue and we do not support Q64."...

5.5CVSS6.6AI score0.01608EPSS
SaveExploits0References3
NVD
NVD
added 2023/02/14 3:15 a.m.22 views

CVE-2023-22370

Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer...

5.2CVSS4.9AI score0.00293EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/03/28 8:45 p.m.27 views

CVE-2017-20014 WEKA INTEREST Security Scanner Webspider denial of service

A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functionality of the component Webspider. The manipulation with an unknown input leads to denial of service. Local access is required to approac...

2.8CVSS5.5AI score0.00261EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/03/28 12:00 a.m.9 views

PT-2022-7888 · Weka · Weka Interest Security Scanner

Name of the Vulnerable Software and Affected Versions: WEKA INTEREST Security Scanner versions up to 1.8 Description: A problematic vulnerability was found in the LAN Viewer component of the WEKA INTEREST Security Scanner, which can be exploited to cause a denial of service. The vulnerability...

5.5CVSS6.7AI score0.00262EPSS
SaveExploits0References6
Rows per page
Query Builder