Lucene search
+L

1832 matches found

Patchstack
Patchstack
added 2025/03/31 12:37 p.m.4 views

WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Radius Blocks versions = 2.2.1...

4.3CVSS7AI score0.00182EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/03/27 7:23 p.m.10 views

CLSA-2025-1743103421 freeradius: Fix of CVE-2024-3596

CVE-2024-3596: fix chosen-prefix collision attack against MD5 Response Authenticator signature that allowed malicious modification of valid RADIUS responses...

9CVSS7.3AI score0.14859EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2025/03/25 12:0 a.m.5 views

Mageia: Security Advisory (MGASA-2025-0113)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.7CVSS7.5AI score0.0071EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/24 5:27 p.m.10 views

MGASA-2025-0113 Updated wpa_supplicant & hostapd packages fix security vulnerability

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail. CVE-2025-24912...

3.7CVSS7.1AI score0.0071EPSS
SaveExploits0References2
Mageia
Mageia
added 2025/03/24 5:27 p.m.27 views

Updated wpa_supplicant & hostapd packages fix security vulnerability

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail. CVE-2025-24912...

3.7CVSS7.2AI score0.0071EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/22 12:0 a.m.11 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wpa_supplicant (SUSE-SU-2025:0977-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0977-1 advisory. - CVE-2025-24912: Fixed hostapd failing to process crafted RADIUS packets properly bsc1239461 Tenable has...

3.7CVSS5.1AI score0.0071EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2025/03/21 8:26 a.m.3 views

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2025-24912: Fixed hostapd failing to process crafted RADIUS packets properly bsc1239461 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

3.7CVSS4.5AI score0.0071EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/21 8:25 a.m.4 views

SUSE-SU-2025:0977-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2025-24912: Fixed hostapd failing to process crafted RADIUS packets properly bsc1239461...

3.7CVSS7.1AI score0.0071EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/20 4:42 p.m.17 views

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

9.8CVSS7.6AI score0.01074EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/03/18 2:15 p.m.4 views

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

9.8CVSS5.8AI score0.01074EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/18 2:15 p.m.10 views

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

9.8CVSS5.8AI score0.01074EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/18 2:15 p.m.14 views

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

9.8CVSS0.01074EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/18 1:56 p.m.17 views

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

9.8CVSS0.01074EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/18 1:56 p.m.69 views

CVE-2023-47539

CVE-2023-47539 : FortiMail 7.4.0 configured with RADIUS authentication and remote_wildcard enabled has an improper access control flaw that may allow a remote unauthenticated attacker to bypass the admin login via a crafted HTTP request. The CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK atta...

9.8CVSS7.4AI score0.01074EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/18 1:56 p.m.7 views

CVE-2023-47539

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remotewildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request...

9.8CVSS7.5AI score0.01074EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/15 2:55 a.m.8 views

CVE-2025-24912

A flaw was found in hostapd. This vulnerability can allow an attacker to force RADIUS authentications to fail via crafted RADIUS packets injected between hostapd and the RADIUS server. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

3.7CVSS6.5AI score0.0071EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/03/12 3:22 p.m.5 views

SUSE CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

3.7CVSS6.9AI score0.0071EPSS
SaveExploits0References8
NVD
NVD
added 2025/03/12 5:15 a.m.9 views

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

3.7CVSS0.0071EPSS
SaveExploits0References4
OSV
OSV
added 2025/03/12 5:15 a.m.9 views

AZL-58604 CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

3.7CVSS5.7AI score0.0071EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/12 5:15 a.m.9 views

AZL-58610 CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

3.7CVSS5.7AI score0.0071EPSS
SaveExploits0References1
Rows per page
Query Builder