Lucene search
+L

854 matches found

Cvelist
Cvelist
•added 2024/09/02 10:22 a.m.•43 views

CVE-2024-33043 Buffer Over-read in FM Host

Transient DOS while handling PS event when Program Service name length offset value is set to 255...

5.5CVSS0.00093EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/01 10:15 p.m.•47 views

CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

9.8CVSS0.007EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2024/09/01 10:15 p.m.•36 views

CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

9.8CVSS7.2AI score0.007EPSS
SaveExploits1References5
OSV
OSV
•added 2024/09/01 10:15 p.m.•21 views

UBUNTU-CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/09/01 12:00 a.m.•46 views

CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

0.007EPSS
SaveExploits1References3
OSV
OSV
•added 2024/09/01 12:00 a.m.•26 views

CVE-2024-45508

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

9.8CVSS6.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/01 12:00 a.m.•0 views

CVE-2024-45508: Out-of-bounds Write

HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...

9.8CVSS8.1AI score0.007EPSS
SaveExploits1References1
NVD
NVD
•added 2024/08/30 7:15 a.m.•42 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS0.00259EPSS
SaveExploits0References2
OSV
OSV
•added 2024/08/30 7:15 a.m.•12 views

CVE-2024-39300

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings...

3.7CVSS5.8AI score0.00481EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/30 6:29 a.m.•73 views

CVE-2024-39300

The ELECOM WAB-I1750-PS wireless access point (v1.5.10 and earlier) contains a missing authentication vulnerability in its Telnet function . If the Telnet function is enabled, a remote attacker can log in to the product without authentication to alter settings, potentially leading to a full compr...

8.1CVSS7.2AI score0.00481EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/08/30 6:29 a.m.•43 views

CVE-2024-39300

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings...

0.00481EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/30 6:29 a.m.•73 views

CVE-2024-42412

CVE-2024-42412 is a cross-site scripting vulnerability in ELECOM wireless access points caused by improper processing of input values in the menu.cgi script. The issue can allow an arbitrary script to run in a user’s browser when visiting a malicious page while authenticated to the device. Affect...

6.1CVSS6.5AI score0.00259EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/08/30 6:29 a.m.•51 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS0.00259EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/08/30 6:29 a.m.•24 views

CVE-2024-42412

Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in menu.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser...

6.1CVSS6.5AI score0.00259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•3 views

CVE-2024-39300: Missing Authentication for Critical Function

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings...

8.1CVSS7.8AI score0.00481EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/29 12:00 a.m.•13 views

PT-2024-29933

Name of the Vulnerable Software and Affected Versions ELECOM wireless access points affected versions not specified WAB-I1750-PS affected versions not specified WAB-S1167-PS affected versions not specified Description A cross-site scripting vulnerability exists due to improper processing of input...

6.1CVSS6.4AI score0.00259EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/08/29 12:00 a.m.•26 views

PT-2024-28426 · Unknown · Wab-I1750-Ps

Name of the Vulnerable Software and Affected Versions: WAB-I1750-PS versions 1.5.10 and earlier Description: A missing authentication vulnerability exists in the Telnet function of the product. When the Telnet function is enabled, a remote attacker may login to the product without authentication...

8.1CVSS7.5AI score0.00481EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/08/27 12:00 a.m.•13 views

ELECOM多款产品 跨站脚本漏洞

ELECOM WRC-X3000GS2-W and others are products of ELECOM Corporation.ELECOM WRC-X3000GS2-W is a wireless router.ELECOM WRC-X3000GS2-B is a gigabit router.ELECOM WRC-X3000GS2A-B is a gigabit router. A cross-site scripting vulnerability exists in various ELECOM products, which originates from the...

6.1CVSS6.4AI score0.00259EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2024/08/06 12:00 a.m.•21 views

Fedora: Security Advisory (FEDORA-2024-053b8330a1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS5.7AI score0.01446EPSS
SaveExploits0References12
Fedora
Fedora
•added 2024/07/23 2:06 p.m.•28 views

[SECURITY] Fedora 40 Update: ghostscript-10.02.1-12.fc40

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

8.8CVSS6.9AI score0.01446EPSS
SaveExploits0
Rows per page
Query Builder