Lucene search
+L

28167 matches found

Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•14 views

PT-2024-36354

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.2 macOS versions prior to Ventura 13.7.2 macOS versions prior to Sonoma 14.7.2 Description: A path handling issue was addressed with improved validation. Running a mount command may unexpectedly execute...

7.8CVSS7.8AI score0.00371EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•8 views

PT-2024-36346 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue was addressed with improved checks. An app may be able to access user-sensitive data. Recommendations: For macOS versions prior ...

5.5CVSS7.1AI score0.00279EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•15 views

PT-2025-11545

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: A logic issue was addressed with improved fil...

10CVSS7.3AI score0.00617EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•12 views

PT-2025-3030 · Apple · Visionos +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7.2 macOS versions prior to 15.2 iPadOS versions prior to 17.7.4 iPadOS versions prior to 18.2 iOS versions prior to 18.2 tvOS versions prior to 18.2 watchOS versions prior to 11.2 visionOS versions prior to 2.2...

7.8CVSS6.8AI score0.00627EPSS
SaveExploits0References12
osv_cve
osv_cve
•added 2024/12/10 4:15 p.m.•23 views

CVE-2024-55544

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

8.8CVSS5.8AI score0.12386EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/12/10 4:04 p.m.•10 views

CVE-2024-55544 Authenticated Command Injection

Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...

8.7CVSS5.8AI score0.12386EPSS
SaveExploits1References1
Microsoft KB
Microsoft KB
•added 2024/12/10 4:00 p.m.•219 views

December 10, 2024—KB5048652 (OS Builds 19044.5247 and 19045.5247) - EXPIRED

December 10, 2024—KB5048652 OS Builds 19044.5247 and 19045.5247 - EXPIRED Applies To Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Windows 10, version 22H2, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft...

9.8CVSS7.2AI score0.83777EPSS
SaveExploits16
BDU FSTEC
BDU FSTEC
•added 2024/12/10 12:00 a.m.•25 views

cs35l56 Component DoS

The vulnerability of the cs35l56 component in the Linux operating system is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6AI score0.0021EPSS
SaveExploits0References24Affected Software8
Photon
Photon
•added 2024/12/10 12:00 a.m.•24 views

Critical Photon OS Security Update - PHSA-2024-5.0-91-0422

Updates of 'apache-tomcat10', 'glib' packages of Photon OS have been released...

9.8CVSS8.1AI score0.06246EPSS
SaveExploits2
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•21 views

Microsoft Windows Wireless Wide Area Network Service Digital Error Vulnerability

Microsoft Windows Wireless Wide Area Network Service is a key component in Windows 10 and Windows 11 from Microsoft Corporation USA that facilitates wireless communication over cellular networks. A numeric error vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An...

4.3CVSS5.5AI score0.00968EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/12/09 12:00 a.m.•22 views

Instant AOS-8/AOS-10 CLI Command Execution

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of restrictions on the loading of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS9.4AI score0.01153EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/09 12:00 a.m.•13 views

Instant AOS-8/AOS-10 CLI Command Execution

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of restrictions on the loading of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS9.4AI score0.01153EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/09 12:00 a.m.•25 views

QTS Command Injection

The vulnerability of the QuTS operating systems and QTS network devices involves the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS7.3AI score0.0131EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/12/09 12:00 a.m.•17 views

Instant AOS-8/AOS-10 CLI Privilege Escalation Command Execution

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary comman...

9CVSS9.5AI score0.01737EPSS
SaveExploits0References4Affected Software2
osv_cve
osv_cve
•added 2024/12/07 1:19 p.m.•23 views

CVE-2024-47115

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...

7.8CVSS7.7AI score0.0023EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/07 12:00 a.m.•26 views

IBM AIX Operating System Command Injection Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An operating system command injection vulnerability exists in IBM AIX versions 7.2 and 7.3, which stems from improper neutralization of user input. An attacker...

7.8CVSS7.7AI score0.0023EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/12/06 10:15 p.m.•20 views

CVE-2024-44852

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetastar::ThetaStar::isUnsafeToPlan...

9.8CVSS5.7AI score0.00604EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/12/06 10:15 p.m.•24 views

CVE-2024-44854

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan...

7.5CVSS5.5AI score0.0059EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/12/06 10:15 p.m.•23 views

CVE-2024-44856

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2smacplanner...

7.5CVSS5.5AI score0.0059EPSS
SaveExploits1References3
NVD
NVD
•added 2024/12/06 10:15 p.m.•43 views

CVE-2024-44852

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation violation via the component thetastar::ThetaStar::isUnsafeToPlan...

9.8CVSS0.00604EPSS
SaveExploits1References3
Rows per page
Query Builder