Lucene search
+L

1593 matches found

Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•5 views

PT-2022-2440

Name of the Vulnerable Software and Affected Versions D-Link DIR-825AC G1 affected versions not specified Description The issue is related to the incorrect handling of the cmd parameter in the cgi-bin/webupg component of the D-Link DIR-825AC G1 router's firmware. This can allow an attacker to...

9CVSS0.32591EPSS
SaveExploits1References8
Prion
Prion
•added 2022/01/18 2:15 p.m.•26 views

Null pointer dereference

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

7.8CVSS7.3AI score0.0182EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2022/01/18 1:46 p.m.•69 views

CVE-2021-38785

CVE-2021-38785 describes a NULL pointer dereference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev. The issue can be triggered by the IOCTL_GET_IOMMU_ADDR ioctl, leading to a system crash. The available documents identify the affected component and the crash impact but ...

7.8CVSS7.3AI score0.0182EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/01/18 1:46 p.m.•31 views

CVE-2021-38785

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

7.5AI score0.0182EPSS
SaveExploits0References4
CVE
CVE
•added 2022/01/18 12:43 p.m.•68 views

CVE-2021-38783

CVE-2021-38783 affects the Allwinner R818 SoC Android Q SDK V1.0 camera driver, exposing /dev/cedar_dev to iotcl IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO. The root cause is an out-of-bounds write in the driver, which can cause a system crash or privilege escalation. Provided documents do not ...

7.8CVSS7.4AI score0.0182EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/10 12:00 a.m.•4 views

PT-2022-1558

Name of the Vulnerable Software and Affected Versions D-Link DI-7200G versions V2.E1 Description The issue is related to insufficient input data cleansing when processing the cmd parameter in the msp info.htm file implementation of the D-Link DI-7200G router's firmware. This can allow a remote...

9.8CVSS0.03746EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•6 views

PT-2025-8469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue in the Linux kernel's SCSI I/O completion and abort handler has been identified. This issue occurs during stress I/O tests with 500+ vports, resulting in hard LOCKUP cal...

5.5CVSS0.002EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•6 views

PT-2025-8154

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the asix driver, where the asix read cmd function would read less bytes than requested by the caller. This...

5.5CVSS0.00268EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/19 12:00 a.m.•3 views

PT-2021-26977

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.85 Description A netns refcount leak was discovered in the devlink nl cmd reload function. The issue was introduced in Linux Kernel version v5.10 and is fixed in version v5.10.85. Recommendations For Linux...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/19 12:00 a.m.•3 views

PT-2021-27060

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.15.7 Description A netns refcount leak was discovered in the devlink nl cmd reload function. The issue was introduced in version v5.10 and is fixed in version v5.15.8. The actual impact and attack...

5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/12/01 12:00 a.m.•16 views

D-Link DAP-2020 Web Cmd File List Code Execution

The vulnerability of the WEBCmdFileList function implementation in D-Link DAP-2020 wireless access points relates to the lack of measures taken to neutralize special elements used in operating system commands when processing CGI scripts. Exploiting this vulnerability can allow an attacker to...

8.8CVSS8AI score0.05089EPSS
SaveExploits0References6Affected Software1
OpenVAS
OpenVAS
•added 2021/11/12 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for uboot-tools (EulerOS-SA-2021-2726)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.03065EPSS
SaveExploits0References2
Veracode
Veracode
•added 2021/11/11 7:55 a.m.•27 views

Denial Of Service (DoS)

cmd/octorpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. Due to lack of limitation in the depth of a certificate chain, when a CA creates children in an ad-hoc fashion, it results in never-ending tree traversal...

7.5CVSS3.8AI score0.00731EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2021/11/11 12:00 a.m.•16 views

VulnCheck KEV: CVE-2020-9377

D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php...

8.8CVSS7.7AI score0.21338EPSS
SaveIn wildExploits1References146
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•5 views

PT-2021-30003

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•5 views

PT-2021-26036

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•3 views

PT-2021-30068

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. It was introduced in version v4.12 and fixed in version v5.4.151. The actual impact and attack plausibility have not ye...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•3 views

PT-2021-26073

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•4 views

PT-2021-26129

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue concerns a resource leak in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•6 views

PT-2021-26208

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns resource leaks in the ccp run aes gcm cmd function. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.12 and fixed in...

5.6AI score
SaveExploits0References1
Rows per page
Query Builder