Lucene search
+L

1360 matches found

OSV
OSV
added 2022/08/05 10:15 p.m.17 views

CVE-2022-24005

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

9.8CVSS7.8AI score0.0124EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/05 4:15 p.m.13 views

CVE-2022-33714

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

6.2CVSS5.8AI score0.00091EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/05 4:15 p.m.12 views

CVE-2022-33714

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

3.3CVSS5.8AI score0.00091EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/05 12:00 a.m.14 views

PT-2022-4671 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow issue exists in the GetValue functionality, which can be triggered by a specially-crafted configuration value. This allows an attacker to modify a configuration value,...

9.8CVSS9.2AI score0.0124EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/08/01 12:00 a.m.26 views

Realtek AP-Router SDK 输入验证错误漏洞

The Realtek AP-Router SDK is a software package for wireless chipsets from Realtek Semiconductor Realtek of China. The Realtek AP-Router SDK suffers from an input validation error vulnerability that originates from remote code execution via a crafted SIP packet containing malicious SDP data...

9.8CVSS9.1AI score0.3708EPSS
SaveExploits2References4
CNVD
CNVD
added 2022/07/22 12:00 a.m.53 views

Samsung Mobile devices SemWifiApClient access control vulnerability (CNVD-2022-65119)

Samsung Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. Samsung Mobile devices SemWifiApClient has an access control vulnerability that originates from improper access control in the sendDHCPACKBroadcast...

3.3CVSS4.2AI score0.00094EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/22 12:00 a.m.55 views

Samsung Mobile devices SemWifiApClient Access Control Vulnerability

Samsung Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. Samsung Mobile devices SemWifiApClient has an access control vulnerability that originates from improper access control in the sendDHCPACKBroadcast...

3.3CVSS4.2AI score0.00094EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/12 2:15 p.m.24 views

CVE-2022-30752

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTASTATECHANGED action...

3.3CVSS0.00094EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:15 p.m.9 views

CVE-2022-30751

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTADHCPACKEVENT action...

3.3CVSS5.8AI score0.00094EPSS
SaveExploits0References2
NVD
NVD
added 2022/07/12 2:15 p.m.24 views

CVE-2022-30751

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTADHCPACKEVENT action...

3.3CVSS0.00094EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/12 2:15 p.m.10 views

CVE-2022-30751

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTADHCPACKEVENT action...

3.3CVSS5.8AI score0.00094EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/12 2:15 p.m.28 views

CVE-2022-30750

Improper access control vulnerability in updateLastConnectedClientInfo function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected...

3.3CVSS0.00094EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/12 2:15 p.m.23 views

Improper access control

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTASTATECHANGED action...

2.1CVSS4.1AI score0.00094EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/07/11 1:31 p.m.72 views

CVE-2022-30752

CVE-2022-30752 concerns an improper access control vulnerability in the SemWifiApClient’s sendDHCPACKBroadcast function. Affected software is SemWifiApClient prior to Samsung SMR Jul-2022 Release 1. The root cause is improper access control that could allow an attacker to obtain the MAC address o...

3.3CVSS4AI score0.00094EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/07/11 12:00 a.m.8 views

PT-2022-20290 · Unknown · Semwifiapclient

Name of the Vulnerable Software and Affected Versions: SemWifiApClient versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the sendDHCPACKBroadcast function. This vulnerability allows an attacker to access the WiFi AP client MA...

3.3CVSS3.7AI score0.00094EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:00 a.m.12 views

The vulnerability of the ap_strcmp_match() function in the Apache HTTP Server allows a hacker to cause a service failure or gain unauthorized access to protected information.

The vulnerability of the apstrcmpmatch function in the Apache HTTP Server is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause service failures or gain unauthorized access to protected information by sending a specially crafted HTTP request...

4CVSS7AI score0.06457EPSS
SaveExploits0References20Affected Software10
Zero Day Initiative
Zero Day Initiative
added 2022/06/29 12:00 a.m.47 views

ZyXel AP Configurator Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ZyXel AP Configurator. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the installer...

7.3CVSS4.8AI score0.00366EPSS
SaveExploits0References1
Snyk
Snyk
added 2022/06/23 9:25 a.m.8 views

Malicious Package

Overview miew-ap is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.10 views

Malicious code in ap-election-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d8b331987758c8e999e446fd9c69fb068900206694fe5bee21b7abd2932512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.12 views

MAL-2022-1033 Malicious code in ap-election-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d8b331987758c8e999e446fd9c69fb068900206694fe5bee21b7abd2932512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder