Lucene search
+L

3848 matches found

CNNVD
CNNVD
•added 2024/10/08 12:00 a.m.•20 views

Siemens SIMATIC S7-1500 CPU security vulnerabilities

SIMATIC Drive Controllers are designed for the automation of production machines, combining the functionality of SIMATIC S7-1500 CPUs and SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the pc-based version of the SIMATIC S7-1500 controller, including optional visualization and...

6.9CVSS6.3AI score0.00557EPSS
SaveExploits0References2
Wired Threat Level
Wired Threat Level
•added 2024/10/04 11:30 a.m.•13 views

This Video Game Controller Has Become the US Military’s Weapon of Choice

After decades of relying on buttons, switches, and toggles, the Pentagon has embraced simple, ergonomic video-game-style controllers already familiar to millions of potential recruits...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/09/26 12:00 a.m.•76 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-4)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-4 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...

9.8CVSS6.5AI score0.00871EPSS
SaveExploits1References85
osv_cve
osv_cve
•added 2024/09/25 5:15 p.m.•24 views

CVE-2024-20510

A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...

9.3CVSS8.2AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/25 5:15 p.m.•75 views

CVE-2024-20510

A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...

9.3CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/25 4:28 p.m.•115 views

CVE-2024-20510

The vulnerability CVE-2024-20510 affects Cisco IOS XE Software for Wireless Controllers via the Central Web Authentication (CWA) feature. A logic error in how the pre-authentication ACL is activated (ACLs received from the AAA server) can allow an unauthenticated, adjacent attacker connected to a...

9.3CVSS8.2AI score0.00276EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/25 4:28 p.m.•31 views

CVE-2024-20510

A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...

4.7CVSS8.2AI score0.00276EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/09/25 4:00 p.m.•67 views

Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability

A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...

4.7CVSS8.1AI score0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•8 views

CVE-2024-20510: Incorrect Authorization

A vulnerability in the Central Web Authentication CWA feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access control list ACL, which could allow access to network resources before user authentication. Thi...

9.3CVSS8.3AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/25 12:00 a.m.•9 views

PT-2024-6907

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Wireless Controllers versions prior to 17.13.1a Description A vulnerability in the Central Web Authentication CWA feature could allow an unauthenticated, adjacent attacker to bypass the pre-authentication access contr...

9.3CVSS8.2AI score0.00276EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/09/25 12:00 a.m.•72 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7009-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

10CVSS7.3AI score0.02701EPSS
SaveExploits4References218
Tenable Nessus
Tenable Nessus
•added 2024/09/23 12:00 a.m.•104 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7007-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

10CVSS7.3AI score0.02701EPSS
SaveExploits4References218
Tenable Nessus
Tenable Nessus
•added 2024/09/23 12:00 a.m.•252 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7007-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-3 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

10CVSS7.3AI score0.02701EPSS
SaveExploits4References218
Mend
Mend
•added 2024/09/21 12:00 a.m.•10 views

CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/15 12:00 a.m.•10 views

CVE-2024-8867: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Perfex CRM 3.1.6. It has been declared as problematic. This vulnerability affects unknown code of the file application/controllers/Clients.php of the component Parameter Handler. The manipulation of the argument message leads to cross site scripting. The attack can be...

5.4CVSS3.2AI score0.00479EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/09/13 12:00 a.m.•121 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-3)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-3 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...

9.8CVSS6.5AI score0.00871EPSS
SaveExploits1References85
Tenable Nessus
Tenable Nessus
•added 2024/09/13 12:00 a.m.•215 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7007-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

10CVSS7.3AI score0.02701EPSS
SaveExploits4References218
Tenable Nessus
Tenable Nessus
•added 2024/09/13 12:00 a.m.•278 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7009-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

10CVSS7.3AI score0.02701EPSS
SaveExploits4References218
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•45 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7003-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-1 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...

9.8CVSS6.5AI score0.00871EPSS
SaveExploits1References85
Tenable Nessus
Tenable Nessus
•added 2024/09/12 12:00 a.m.•111 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-7003-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7003-2 advisory. It was discovered that the JFS file system contained an out-of-bounds read vulnerability when printing xattr debug information. A local attacker could us...

9.8CVSS6.5AI score0.00871EPSS
SaveExploits1References85
Rows per page
Query Builder