Lucene search
+L

481 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:46 a.m.•18 views

CVE-2019-19495

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing...

10CVSS7AI score0.04287EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:15 a.m.•18 views

CVE-2010-2082

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative password aka SAPassword of W2402, which makes it easier for remote attackers to obtain privileged access...

5CVSS7.2AI score0.0114EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 10:40 p.m.•20 views

CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

5CVSS7.1AI score0.01388EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 8:33 p.m.•18 views

CVE-2002-2110

The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service modem device reset by connecting to port 80 on the 10.0.0.0/8 device...

5CVSS7AI score0.01813EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/13 12:00 a.m.•7 views

CVE-2025-31929: Missing Immutable Root of Trust in Hardware

A vulnerability has been identified in IEC 1Ph 7.4kW Child socket 8EM1310-2EH04-0GA0 All versions, IEC 1Ph 7.4kW Child socket/ shutter 8EM1310-2EN04-0GA0 All versions, IEC 1Ph 7.4kW Parent cable 7m 8EM1310-2EJ04-3GA1 All versions, IEC 1Ph 7.4kW Parent cable 7m incl. SIM 8EM1310-2EJ04-3GA2 All...

4.2CVSS6.4AI score0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/13 12:00 a.m.•21 views

PT-2025-20858 · Unknown · Iec 3Ph 22Kw Child Socket/ Shutter +29

Name of the Vulnerable Software and Affected Versions: IEC 1Ph 7.4kW Child socket versions prior to V2.135 IEC 1Ph 7.4kW Child socket/ shutter versions prior to V2.135 IEC 1Ph 7.4kW Parent cable 7m versions prior to V2.135 IEC 1Ph 7.4kW Parent cable 7m incl. SIM versions prior to V2.135 IEC 1Ph...

8.8CVSS6.3AI score0.00286EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/02/20 7:19 a.m.•14 views

CVE-2024-57963

Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects USB-CONVERTERCABLE DRIVER:...

7.3CVSS6.8AI score0.00176EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•14 views

Hitachi USB-CONVERTERCABLE DRIVER 安全漏洞

Hitachi USB-CONVERTERCABLE DRIVER is a driver from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi USB-CONVERTERCABLE DRIVER that originates from an unsafe loading of a dynamic link library, which could lead to local code execution or information disclosure...

7.3CVSS6.7AI score0.00176EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/15 9:15 p.m.•56 views

UBUNTU-CVE-2024-45610

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form...

6.5CVSS5.8AI score0.00337EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/15 8:14 p.m.•51 views

CVE-2024-45610 GLPI has a reflected XSS in ajax/cable.php

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form...

6.5CVSS0.00337EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/15 8:14 p.m.•5 views

CVE-2024-45610

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form...

7.1CVSS0.00337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•16 views

PT-2024-10108 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.17 Description: The issue is related to a reflected XSS vulnerability located in the Cable form of GLPI, an open-source asset and IT management software package. This vulnerability can be exploited by an...

9.8CVSS6.3AI score0.86692EPSS
SaveExploits12References74
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•5 views

CVE-2024-45610: Improper Neutralization of Input During Web Page Generation

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form...

6.5CVSS5.7AI score0.00337EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•19 views

GLPI 安全漏洞

GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and i...

6.5CVSS4.4AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/07 12:00 a.m.•39 views

CVE-2019-20469

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable...

0.00323EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/07 12:00 a.m.•13 views

CVE-2019-20469

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable...

6.2AI score0.00323EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•5 views

CVE-2019-20469: Insecure Storage of Sensitive Information

An issue was discovered on One2Track 2019-12-08 devices. Confidential information is needlessly stored on the smartwatch. Audio files are stored in .amr format, in the audior directory. An attacker who has physical access can retrieve all audio files by connecting via a USB cable...

4.6CVSS5.8AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/07 12:00 a.m.•71 views

CVE-2019-20469

The One2Track 2019-12-08 smartwatch contains a vulnerability where confidential information is needlessly stored on the device. Specifically, audio files are stored in .amr format within the audior directory . An attacker with physical access can retrieve all audio files by connecting the device ...

4.6CVSS6.2AI score0.00323EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2024/09/24 3:05 a.m.•13 views

kernel: scsi: qla2xxx: Fix command flush on cable pull

A flaw was found in the qla2xxx module in the Linux kernel. A NULL pointer dereference can be triggered when the system is under memory stress and the driver cannot allocate memory to handle the error recovery of cable pull, causing a system crash and a denial of service...

8.8CVSS7.2AI score0.00371EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/09/10 12:00 a.m.•44 views

PT-2024-7411 · Siemens · Simatic S7-200 Smart Cpu Cr40 +3

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-200 SMART CPU CR40 6ES7288-1CR40-0AA0 All versions SIMATIC S7-200 SMART CPU CR60 6ES7288-1CR60-0AA0 All versions SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA0 All versions SIMATIC S7-200 SMART CPU SR20 6ES7288-1SR20-0AA1 All...

8.7CVSS7.5AI score0.0056EPSS
SaveExploits0References14
Rows per page
Query Builder