Lucene search
K

707 matches found

CNVD
CNVD
added 2025/08/10 12:0 a.m.6 views

Alpine iLX-507 Input Validation Error Vulnerability

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from an input validation error vulnerability, which stems from improper validation of the TIDAL music streaming application credentials, that can be exploited by an attacker to execute arbitrary code in the ro...

8CVSS7.8AI score0.00036EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/10 12:0 a.m.4 views

Alpine iLX-507 Stack Buffer Overflow Vulnerability (CNVD-2025-20810)

The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in a root context...

7.4CVSS7.8AI score0.00242EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/08 1:24 a.m.4 views

CVE-2025-8639

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware updat...

6.8CVSS6.9AI score0.00174EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-14901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote...

10CVSS7.7AI score0.0467EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/07 4:45 p.m.3 views

CVE-2025-34151 Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection

A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. The input is passed directly to system-level commands without sanitation, enabling unauthenticated attackers to achieve root-level code...

9.4CVSS7.6AI score0.01714EPSS
Exploits0References3
OSV
OSV
added 2025/08/06 2:15 a.m.1 views

CVE-2025-8656

Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows physically present attackers to downgrade software on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

6.8CVSS5.6AI score
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.2 views

CVE-2025-8655

Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

6.8CVSS6.3AI score
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.1 views

CVE-2025-8648

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score0.00174EPSS
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.4 views

CVE-2025-8647

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.2 views

CVE-2025-8652

Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

6.8CVSS6.3AI score0.00298EPSS
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.1 views

CVE-2025-8639

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware updat...

6.8CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.3 views

CVE-2025-8645

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.2 views

CVE-2025-8632

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score0.00174EPSS
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.1 views

CVE-2025-8638

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score
Exploits0References1
OSV
OSV
added 2025/08/06 2:15 a.m.0 views

CVE-2025-8631

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

6.8CVSS6.2AI score
Exploits0References1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.1 views

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8AI score0.00174EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.2 views

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8AI score0.00174EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.1 views

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8AI score0.00174EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.1 views

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8AI score0.00298EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.1 views

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

6.8CVSS8AI score0.00174EPSS
Exploits0References1
Rows per page
Query Builder