Lucene search
+L

4449 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•3 views

CVE-2024-56440: Incorrect Default Permissions

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

7.5CVSS5.9AI score0.00198EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/08 12:00 a.m.•21 views

PT-2025-3284 · Unknown · Connectivity Module

Name of the Vulnerable Software and Affected Versions: Connectivity module affected versions not specified Description: The issue is related to a permission control vulnerability in the Connectivity module. Successful exploitation of this vulnerability may cause features to perform abnormally...

7.5CVSS6.8AI score0.00198EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•24 views

Huawei HarmonyOS 权限许可和访问控制问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS Connectivity module, which can be exploited by an attacker to cause functionality anomalies...

7.5CVSS6.8AI score0.00198EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/06 10:33 a.m.•41 views

CVE-2024-21464 Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption while processing IPA statistics, when there are no active clients registered...

8.4CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/06 10:33 a.m.•166 views

CVE-2024-21464

CVE-2024-21464 : Memory corruption in Qualcomm chipset kernels when processing IPA statistics with no active clients registered. Connected documents confirm it affects Qualcomm components (kernel) and is described as a memory corruption issue in multiple sources. Public technical details across s...

8.4CVSS8.6AI score0.00148EPSS
SaveExploits0References1Affected Software1
Pen Test Partners Blog
Pen Test Partners Blog
•added 2024/12/23 6:31 a.m.•23 views

Heels on fire. Hacking smart ski socks

TL;DR A silly-season BLE connectivity story Overheat people’s smart ski socks …but only when in Bluetooth range AND when the owner's phone is out of range of their feet! Having experienced painfully cold feet several times over the years while skiing, including once at minus 42°C in the Canadian...

7.5AI score
SaveExploits0
HackRead
HackRead
•added 2024/12/17 2:54 p.m.•20 views

RPC Management Has Come A Long Way In Two Short Years.  Here’s Why.

Explore RPC Management: Learn how modern decentralized RPC providers solve scalability & connectivity issues in Web3, ensuring secure,…...

7.3AI score
SaveExploits0
Citrix
Citrix
•added 2024/12/17 12:00 a.m.•18 views

DaaS - Issue with cloud connectors after upgrade failure

The cloud connector connectivity test fails. Run sfc /scannow in Administrator Command Prompt to check for corrupt files...

7.2AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2024/12/17 12:00 a.m.•28 views

Moderate: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

7.5CVSS8AI score0.01127EPSS
SaveExploits0References4
NVD
NVD
•added 2024/12/04 6:15 p.m.•33 views

CVE-2018-9394

In mtkp2pwextsetkey of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glp2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00083EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/04 6:15 p.m.•39 views

CVE-2018-9395

In mtkcfg80211vendorpacketkeepalivestart and mtkcfg80211vendorsetconfig of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glvendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

7.8CVSS0.00083EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/04 5:19 p.m.•44 views

CVE-2018-9394

In mtkp2pwextsetkey of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glp2p.c, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

0.00083EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•25 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking in mtkcfg80211vendorpacketkeepalive in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glvendor.c and...

7.8CVSS6.8AI score0.00083EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•19 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a missing boundary check in procfilewrite in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glproc.c, where an out-of-bounds write is possible...

7.8CVSS9.1AI score0.00083EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•11 views

CVE-2018-9395: Out-of-bounds Write

In mtkcfg80211vendorpacketkeepalivestart and mtkcfg80211vendorsetconfig of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glvendor.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

7.8CVSS7.4AI score0.00083EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/27 5:15 p.m.•18 views

CVE-2024-31976

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter...

8CVSS6AI score0.00992EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•5 views

CVE-2024-31976: Improper Neutralization of Special Elements used in an OS Command

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter...

8CVSS6.4AI score0.00992EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/27 12:00 a.m.•39 views

CVE-2024-31976

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter...

0.00992EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/27 12:00 a.m.•20 views

PT-2024-24330

Name of the Vulnerable Software and Affected Versions EnGenius EWS356-FIR versions 1.1.30 and earlier Description The issue allows a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter. This enables the attacker to gain unauthorized access and control over t...

8CVSS6.2AI score0.00992EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/11/27 12:00 a.m.•10 views

CVE-2024-31976

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter...

8AI score0.00992EPSS
SaveExploits0References2
Rows per page
Query Builder