Lucene search
+L

4769 matches found

RedhatCVE
RedhatCVE
•added 2025/03/08 6:10 a.m.•19 views

CVE-2025-20908

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting...

6.5CVSS6.8AI score0.00276EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/06 5:15 a.m.•30 views

CVE-2025-20908

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting...

6.5CVSS5.8AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/06 5:15 a.m.•15 views

CVE-2025-20908

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting...

6.5CVSS0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/06 5:04 a.m.•24 views

CVE-2025-20908

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting...

6.5CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/06 5:04 a.m.•8 views

CVE-2025-20908

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting...

6.5CVSS7.1AI score0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/06 5:04 a.m.•70 views

CVE-2025-20908

CVE-2025-20908 affects Auracast prior to the Samsung SMR Mar‑2025 Release 1. The issue arises from the use of insufficiently random values , enabling an adjacent attacker to access Auracast broadcasting. According to the public records, the CVSS v3.1 base score is 6.5 (Medium) with Attack Vector:...

6.5CVSS7.1AI score0.00276EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•18 views

PT-2025-9879

Name of the Vulnerable Software and Affected Versions Auracast versions prior to SMR Mar-2025 Release 1 Description The issue arises from the use of insufficiently random values in Auracast, allowing adjacent attackers to access Auracast broadcasting. Recommendations For versions prior to SMR...

6.5CVSS5.4AI score0.00276EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•0 views

CVE-2025-20908: Undefined Security Weakness

Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting...

6.5CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2022-2393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw...

5.7CVSS6.3AI score0.00251EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2020-10135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to comple...

5.4CVSS6.8AI score0.02366EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2025/03/03 2:27 a.m.•13 views

CVE-2025-23117

An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system...

6.8CVSS6.7AI score0.00235EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•0 views

CVE-2025-20649: Improper Handling of Insufficient Permissions or Privileges

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue I...

6.5CVSS6.8AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/01 1:52 a.m.•6 views

CVE-2025-23116

An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras...

9.6CVSS9.4AI score0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/01 1:52 a.m.•24 views

CVE-2025-23118

An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system...

6.4CVSS0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/01 1:52 a.m.•24 views

CVE-2025-23116

An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras...

9.6CVSS0.00512EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/01 1:52 a.m.•88 views

CVE-2025-23116

CVE-2025-23116 describes an Authentication Bypass in UniFi Protect Application with Auto-Adopt Bridge Devices enabled. On a network adjacent to UniFi Protect Cameras, an attacker could leverage this flaw to take control of UniFi Protect Cameras. The Red Hat and NVD records corroborate the same de...

9.6CVSS7.1AI score0.00512EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/26 8:21 a.m.•14 views

CVE-2024-30220

Command injection vulnerability in PLANEX COMMUNICATIONS wireless LAN routers allows a network-adjacent unauthenticated attacker to execute an arbitrary command by sending a specially crafted request to a certain port. Note that MZK-MF300N is no longer supported, therefore the update for this...

8.8CVSS9.1AI score0.01013EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•2 views

CVE-2025-20111: Insufficient Granularity of Access Control

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

7.4CVSS7.4AI score0.00321EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/18 12:00 a.m.•19 views

Cisco IOS Software Intermediate System to Intermediate System DoS (cisco-sa-isis-sGjyOUHX)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...

7.4CVSS5.6AI score0.00258EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/14 9:29 p.m.•17 views

CVE-2024-40887

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

6.1CVSS7AI score0.00216EPSS
SaveExploits0References1
Rows per page
Query Builder