Lucene search
+L

23353 matches found

Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.9 views

Azure Linux 3.0 Security Update: expat / python3 (CVE-2024-50602)

The version of expat / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50602 advisory. - An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser...

5.9CVSS7AI score0.01033EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:00 a.m.8 views

EulerOS 2.0 SP11 : expat (EulerOS-SA-2025-1136)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an...

5.9CVSS7.1AI score0.01033EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/08 4:29 a.m.25 views

CVE-2024-57071

A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.7AI score0.00443EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/08 12:00 a.m.7 views

PT-2025-6903 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: FFmpeg versions prior to 7.1 Description: A problem has been found in the function mov read trak of the file libavformat/mov.c of the component MOV Parser. The manipulation leads to null pointer dereference. Local access is required to approa...

5.5CVSS3.6AI score0.00309EPSS
SaveExploits1References19
RedhatCVE
RedhatCVE
added 2025/02/06 10:36 a.m.17 views

CVE-2017-12635

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit users documents with duplicate keys for 'roles' used for access control within the database, including the special case 'admin' role,...

10CVSS7AI score0.99838EPSS
SaveExploits23References2
RedhatCVE
RedhatCVE
added 2025/02/06 3:34 a.m.15 views

CVE-2021-44369

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetNtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 3:34 a.m.16 views

CVE-2021-44387

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPtzPreset param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:33 a.m.16 views

CVE-2021-44361

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Set3G param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:33 a.m.18 views

CVE-2021-44406

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 3:33 a.m.14 views

CVE-2021-44370

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetFtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:32 a.m.11 views

CVE-2021-44415

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. ModifyUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 3:32 a.m.14 views

CVE-2021-44383

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetAutoUpgrade param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 3:32 a.m.16 views

CVE-2021-44419

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetMdAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 3:31 a.m.15 views

CVE-2021-44374

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetMask param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:31 a.m.15 views

CVE-2021-44402

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzSerial param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:31 a.m.13 views

CVE-2021-44411

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Search param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:30 a.m.11 views

CVE-2021-44358

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 3:30 a.m.15 views

CVE-2021-44413

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. AddUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:29 a.m.18 views

CVE-2021-44363

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPush param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01145EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/06 3:29 a.m.17 views

CVE-2021-44390

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Format param is not object. An attacker can send an HTTP request to trigger this vulnerability...

8.6CVSS6.8AI score0.01207EPSS
SaveExploits1References3
Rows per page
Query Builder