Lucene search
+L

4189 matches found

HPE Security Bulletins
HPE Security Bulletins
added 2025/02/14 12:00 a.m.19 views

HPESBGN04808 rev.1 - HPE Intel E810 Series Ethernet Controllers, INTEL-SA-01236, Intel® 800 Series Ethernet Driver Software, Information Disclosure Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel E810-XXVDA4 Ethernet 10/25Gb 4-port SFP28 Adapter for HPE - Prior to v4.6 Intel E810-CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE - Prior to v4.6 Intel E810-CQDA...

3.3CVSS6.1AI score0.00233EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/02/14 12:00 a.m.22 views

The vulnerabilities of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the software for designing, operating, and maintaining technological installations like COMOS, allow attackers to execute XXE attacks.

The vulnerability of the Generic Data Mapper, Engineering Adapter, and Engineering Interface modules of the COMOS software for designing, operating, and maintaining technological installations is related to a bug that restricts XML references to external objects. Exploiting this vulnerability cou...

5.5CVSS5.6AI score0.00185EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/02/12 10:15 p.m.10 views

CVE-2024-24852

Uncontrolled search path in some IntelR Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/12 9:19 p.m.9 views

CVE-2024-36274

Out-of-bounds write in the IntelR 800 Series Ethernet Driver for IntelR Ethernet Adapter Complete Driver Pack before versions 29.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

7.1CVSS6.5AI score0.00371EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/12 9:19 p.m.62 views

CVE-2024-24852

CVE-2024-24852 affects Intel’s Ethernet Adapter Complete Driver Pack , where versions prior to 29.1 expose an Uncontrolled search path vulnerability. This could allow an authenticated local user to escalate privileges. Documented impact aligns with CVSS v3.1: LOCAL access, high confidentiality/in...

6.7CVSS7.2AI score0.00199EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/12 9:19 p.m.19 views

CVE-2024-24852

Uncontrolled search path in some IntelR Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/12 9:19 p.m.3 views

CVE-2024-24852

Uncontrolled search path in some IntelR Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.7AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.8 views

Intel Ethernet Adapter Complete Driver Pack 代码问题漏洞

Intel Ethernet Adapter Complete Driver Pack is a complete driver for Ethernet adapters from Intel Corporation. A code issue vulnerability exists in Intel Ethernet Adapter Complete Driver Pack versions prior to 29.1, which arises from an uncontrolled search path that could allow an authenticated...

6.7CVSS6.5AI score0.00199EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.4 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel up to version 6.7.1, there is a use-after-free in cecqueuemsgfh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c...

5.5CVSS6.6AI score0.00254EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/11 12:00 a.m.8 views

PT-2025-6626 · Intel · Intel Ethernet Adapter Complete Driver Pack

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapter Complete Driver Pack versions prior to 29.1 Description: The issue is related to an uncontrolled search path in some installations of the IntelR Ethernet Adapter Complete Driver Pack. This could potentially allow an...

6.7CVSS7.3AI score0.00199EPSS
SaveExploits0References4
Intel
Intel
added 2025/02/11 12:00 a.m.13 views

Intel® Ethernet Adapter Complete Driver Pack Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Adapter Complete Driver Pack may allow escalation of privilege or denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-24852 Description: Uncontrolled...

7.1CVSS7.9AI score0.00371EPSS
SaveExploits0
Lenovo
Lenovo
added 2025/02/10 6:47 p.m.9 views

Intel Ethernet Adapter Complete Driver Pack Software Advisory - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Lenovo
Lenovo
added 2025/02/10 6:47 p.m.10 views

Intel Ethernet Adapter Complete Driver Pack Software Advisory - Lenovo Support US

No description provided...

5.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 7:51 p.m.14 views

CVE-2022-40722

A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA...

7.7CVSS6.8AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:16 a.m.14 views

CVE-2024-23641

SvelteKit is a web development kit. In SvelteKit 2, sending a GET request with a body eg to a built and previewed/hosted sveltekit app throws Request with GET/HEAD method cannot have body. and crashes the preview/hosting. After this happens, one must manually restart the app. TRACE requests will...

7.5CVSS7.5AI score0.00764EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:00 a.m.13 views

CVE-2024-32652

The adapter @hono/node-server allows you to run your Hono application on Node.js. Prior to 1.10.1, the application hangs when receiving a Host header with a value that @hono/node-server can't handle well. Invalid values are those that cannot be parsed by the URL as a hostname such as an empty...

7.5CVSS7.5AI score0.00882EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/03 9:01 a.m.13 views

MAL-2025-1177 Malicious code in sol-wallet-adapter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73b8c9916aaa68a346fd8bc05ae98f04028ce384654c5ece31bbf68657a7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/01/31 3:01 a.m.9 views

MAL-2025-718 Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/31 3:01 a.m.7 views

Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
CBLMariner
CBLMariner
added 2025/01/21 11:41 p.m.14 views

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2

CVE-2024-45338 affecting package prometheus-adapter for versions less than 0.12.0-2. A patched version of the package is available...

5.3CVSS7.3AI score0.00874EPSS
SaveExploits0
Rows per page
Query Builder