Lucene search
+L

18523 matches found

osv_debian
osv_debian
•added 2024/03/28 7:15 p.m.•10 views

DEBIAN-CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS7.2AI score0.01033EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/03/28 7:15 p.m.•24 views

CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.6AI score
SaveExploits0References10
NVD
NVD
•added 2024/03/28 7:15 p.m.•30 views

CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS8.5AI score0.01033EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2024/03/28 7:15 p.m.•53 views

CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS6.9AI score0.01033EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2024/03/28 7:15 p.m.•22 views

UBUNTU-CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS7AI score0.01033EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/03/28 6:32 p.m.•42 views

CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS7.4AI score0.01033EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/03/28 6:32 p.m.•41 views

CVE-2024-3019 Pcp: exposure of the redis server backend allows remote command execution via pmproxy

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS8.7AI score0.01033EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2024/03/28 6:32 p.m.•35 views

CVE-2024-3019 Pcp: exposure of the redis server backend allows remote command execution via pmproxy

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS6.7AI score0.01033EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/03/28 12:00 a.m.•21 views

NEC Aterm 安全漏洞

The NEC Aterm is a series of wireless routers from Nippon Electric NEC. A security vulnerability exists in NEC Aterm that stems from the use of hard-coded passwords that allow an attacker to execute arbitrary operating system commands over the Internet. The following products and versions are...

9.8CVSS8.9AI score0.00577EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•22 views

PT-2024-22207

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

9.8CVSS8.7AI score0.00577EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•9 views

CVE-2024-28010: Use of Hard-coded Password

Use of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP,...

9.8CVSS6.2AI score0.00577EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/28 12:00 a.m.•20 views

NEC Aterm 安全漏洞

The NEC Aterm is a series of wireless routers from Nippon Electric NEC. A security vulnerability exists in NEC Aterm that originates from allowing an attacker to execute arbitrary commands with root privileges over the Internet. The following products and versions are affected: WG1800HP4,...

9.8CVSS8.8AI score0.0065EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•19 views

PT-2024-22205

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

9.8CVSS8.8AI score0.0065EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•19 views

PT-2024-22204

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

9.8CVSS8.6AI score0.00624EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•8 views

CVE-2024-28007: Improper Authentication

Improper authentication vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP,...

9.8CVSS6.3AI score0.0065EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•24 views

PT-2024-22209

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

9.8CVSS8.8AI score0.00743EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•3 views

CVE-2024-3019: Exposure of Resource to Wrong Sphere

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS5.8AI score0.01033EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/03/27 5:56 p.m.•60 views

CVE-2024-3019

A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be...

8.8CVSS8.8AI score0.01033EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2024/03/27 10:39 a.m.•73 views

Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

Cybersecurity researchers are warning that threat actors are actively exploiting a "disputed" and unpatched vulnerability in an open-source artificial intelligence AI platform called Anyscale Ray to hijack computing power for illicit cryptocurrency mining. "This vulnerability allows attackers to...

9.8CVSS8.7AI score0.83942EPSS
SaveExploits23
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•36 views

PT-2024-22211

Name of the Vulnerable Software and Affected Versions NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP...

9.8CVSS8.6AI score0.00689EPSS
SaveExploits0References7
Rows per page
Query Builder