Lucene search
+L

3943 matches found

NVD
NVD
•added 2024/12/10 7:15 p.m.•31 views

CVE-2024-50921

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...

6.5CVSS0.00398EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/10 12:00 a.m.•20 views

CVE-2024-50921

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...

6.9AI score0.00398EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/10 12:00 a.m.•21 views

CVE-2024-50920

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

8.6AI score0.00462EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/10 12:00 a.m.•31 views

CVE-2024-50920

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

0.00462EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•23 views

Silicon Labs Z-Wave 700和Silicon Labs Z-Wave 800 安全漏洞

Silicon Labs Z-Wave 700 SiLabs Z-Wave 800 and Silicon Labs Z-Wave 800 SiLabs Z-Wave 800 are a series of chips from Silicon Labs, Inc. in the United States. A security vulnerability exists in Silicon Labs Z-Wave 700 and Silicon Labs Z-Wave 800 version v7.21.1, which stems from insecure privilege...

8.8CVSS6.8AI score0.00462EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•10 views

CVE-2024-50921: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to cause a Denial of Service DoS via repeatedly sending crafted packets to the controller...

6.5CVSS5.8AI score0.00398EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/10 12:00 a.m.•75 views

CVE-2024-50920

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow an attacker to create a fake node by supplying crafted packets . This vulnerability stems from insecure privilege management within the software. To mitigate risk, it is recommended to restrict access to node cr...

8.8CVSS6.6AI score0.00462EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•7 views

CVE-2024-50920: Improper Preservation of Permissions

Insecure permissions in Silicon Labs SiLabs Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets...

8.8CVSS5.8AI score0.00462EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/12/03 12:00 a.m.•16 views

The vulnerability of MELSEC iQ-F Ethernet module software and EtherNet/IP modules arises from the improper validation of certain input types, allowing attackers to trigger malfunctions during maintenance operations.

The vulnerability of MELSEC iQ-F Ethernet module software and EtherNet/IP modules is related to improper validation of specified types of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure by sending specially crafted SLMP packets...

7.8CVSS5.5AI score0.00678EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/03 12:00 a.m.•23 views

The vulnerability of the Citrix NetScaler Application Delivery Controller (previously Citrix ADC) and the Citrix NetScaler Gateway (previously Citrix Gateway) access control systems lies in the fact that operations are executed outside of the buffer in memory, allowing attackers to cause service failures.

The vulnerability of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the Citrix NetScaler Gateway previously Citrix Gateway access control system lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cau...

7.8CVSS5.7AI score0.00559EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/03 12:00 a.m.•14 views

The vulnerability of the Ethernet connection extension module of Mitsubishi Electric India GC-ENET-COM, related to the improper operation of the signal processor, allows a perpetrator to trigger a service failure.

The vulnerability of the Mitsubishi Electric India GC-ENET-COM Ethernet connection device is related to improper operation of the signal processor. Exploiting this vulnerability allows attackers to send specially crafted packets and trigger service failures...

7.8CVSS6.2AI score0.00686EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/11/25 12:00 a.m.•23 views

The vulnerability of the FiveCo RAP traffic analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the FiveCo RAP traffic analyzer of Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures by injecting specially crafted packets or capture files...

7.8CVSS6.6AI score0.00266EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
•added 2024/11/21 12:00 a.m.•8 views

Wireshark 安全漏洞

Wireshark is a very popular network packet analyzer that intercepts various network packets and displays packet details. A denial of service vulnerability exists in Wireshark. The vulnerability is due to a crash in the ECMP unpacker when processing specific packets or carefully constructed captur...

7.8CVSS6.7AI score0.00297EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2024/11/19 6:15 a.m.•23 views

CVE-2024-8403

Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET versions 1.100 to 1.200 and FX5-ENET/IP versions 1.100 to 1.104 allows a remote attacker to cause a Denial of Service condition in Ethernet communication of the products by...

7.5CVSS5.9AI score0.00678EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•13 views

PT-2024-10220 · Schneider Electric · Bmenor2200H +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. Thi...

8.7CVSS7.3AI score0.00628EPSS
SaveExploits0References19
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•16 views

Mitsubishi Electric FX5-ENET 安全漏洞

The Mitsubishi Electric FX5-ENET is an Ethernet communication module from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric FX5-ENET version 1.100 and earlier, which originates from improper input validation and allows remote attackers to cause a denial of service ...

7.5CVSS6.4AI score0.00678EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/18 3:53 p.m.•41 views

CVE-2020-3548 Cisco Email Security Appliance Denial Of Service Vulnerability

A vulnerability in the Transport Layer Security TLS protocol implementation of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service DoS condition. The...

5.3CVSS0.00843EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•19 views

Cesanta Mongoose Web Server 输入验证错误漏洞

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. An input validation error vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of an integer overflow that allows an attacker to send...

7.5CVSS6.7AI score0.00485EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/15 4:15 p.m.•23 views

CVE-2022-20849

A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE process to continually crash. This vulnerability exists because the PPPoE feature does not properly handle an error...

6.1CVSS5.8AI score0.00277EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/11/15 1:23 p.m.•185 views

Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy

FortiOS and FortiProxy Format String Vulnerability to RCE CV...

9.8CVSS9.9AI score0.61725EPSS
SaveExploits8
Rows per page
Query Builder