Lucene search
K

7640 matches found

CNNVD
CNNVD
added 2024/10/08 12:0 a.m.4 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2024 Release 1 prior to Release 1, which stems from improper checking of anomalies b...

4.1CVSS6.5AI score0.00102EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/10/08 12:0 a.m.5 views

Intel TDX Module firmware 代码问题漏洞

Intel TDX Module firmware is a firmware from Intel Corporation USA. A code issue vulnerability exists in Intel TDX Module firmware version 1.5.06, which arises from improper exception or exception checking in the firmware and allows a privileged user to disclose information via local access...

2.5CVSS6.3AI score0.00143EPSS
Exploits0References3
OSV
OSV
added 2024/10/07 10:16 p.m.8 views

MAL-2024-11564 Malicious code in crypto-format-checking (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95b535a5d579db23cf10d4a9897278238afb3093600235b1f39ddf2cca74600 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/07 10:16 p.m.6 views

Malicious code in crypto-format-checking (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95b535a5d579db23cf10d4a9897278238afb3093600235b1f39ddf2cca74600 Inside the library there is a part running code hidden in the attached image, which then exfiltrate user-provided data, downloads and install next stage code,...

7.2AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/07 12:58 p.m.12 views

CVE-2024-23375 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL

Memory corruption during the network scan request...

6.7CVSS7.2AI score0.00122EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.3 views

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the vdec module, which may allow out-of-bounds writes...

7.8CVSS6.8AI score0.00083EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.2 views

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the Modem module, which may crash the system...

7.5CVSS6.8AI score0.00723EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/07 12:0 a.m.3 views

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the m4u module, which may allow out-of-bounds reads...

4.4CVSS6.8AI score0.00099EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.5 views

The vulnerability of the mv88e6xxx.default_mdio_bus() function in Marvell 88E6xxx device driver for Linux operating systems allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the mv88e6xxx.defaultmdiobus function in the drivers/net/dsa/mv88e6xxx/chip.c file of the Marvell 88E6xxx device driver in the Linux operating system is related to improper checking of the list. Exploiting this vulnerability could allow an attacker to compromise the integrity...

6.1CVSS6.7AI score0.00233EPSS
Exploits0References41Affected Software6
NVD
NVD
added 2024/10/03 7:15 p.m.21 views

CVE-2024-41590

Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...

8CVSS0.0032EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/10/03 12:0 a.m.14 views

CVE-2024-41590

Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6...

7.1AI score0.0032EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/03 12:0 a.m.4 views

The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to insufficient checking of unusual or exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted TCP packets...

5.9CVSS5.5AI score0.00398EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2024/10/03 12:0 a.m.58 views

CVE-2024-41590

CVE-2024-41590 affects DrayTek Vigor310 routers, where the web UI CGI endpoints expose a buffer overflow via missing bounds checks on POST parameters passed to strcpy. Affected firmware includes versions up to 4.3.2.6, and exploitation requires authenticated access. The Red Hat/NCSC/PT-Security e...

8CVSS6.7AI score0.0032EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.3 views

PT-2024-7398 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to...

5.7CVSS7AI score0.00211EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2024/10/02 12:0 a.m.5 views

The vulnerability of the CGI function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G+V2, DI-7100GV2, DI-7200GV2, DI-7300G+V2, and DI-7400G+V2 allows attackers to execute arbitrary commands.

The vulnerability of the CGI function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G+V2, DI-7100GV2, DI-7200GV2, DI-7300G+V2, and DI-7400G+V2 lies in insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute...

8.8CVSS5.9AI score0.31751EPSS
Exploits0References3Affected Software7
GithubExploit
GithubExploit
added 2024/09/28 8:29 a.m.1147 views

Exploit for OS Command Injection in Zimbra Collaboration

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview Th...

10CVSS9.7AI score0.99976EPSS
Exploits4
SUSE CVE
SUSE CVE
added 2024/09/28 2:51 a.m.2 views

SUSE CVE-2024-46836

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeedudc: validate endpoint index for ast udc We should verify the bound of the array to assure that host may not manipulate the index to point past endpoint array. Found by static analysis...

5.5CVSS6.4AI score0.00245EPSS
Exploits0References13
SUSE CVE
SUSE CVE
added 2024/09/28 2:51 a.m.6 views

SUSE CVE-2024-46859

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...

5.5CVSS6.5AI score0.00217EPSS
Exploits0References19
NVD
NVD
added 2024/09/27 1:15 p.m.20 views

CVE-2024-46859

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...

7.8CVSS0.00217EPSS
Exploits0References6
OSV
OSV
added 2024/09/27 1:15 p.m.12 views

AZL-49890 CVE-2024-46859 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINFCURBRIGHT0x0d without checking that the SINF array is big enough...

7.8CVSS6.6AI score0.00217EPSS
Exploits0References1
Rows per page
Query Builder