Lucene search
+L

15 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/24 12:0 a.m.12 views

NewStart CGSL MAIN 7.02 : kernel-modules-sub Multiple Vulnerabilities (NS-SA-2025-0250)

The remote NewStart CGSL host, running version MAIN 7.02, has kernel-modules-sub packages installed that are affected by multiple vulnerabilities: - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to...

8.8CVSS7.7AI score0.02033EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-51816

Malicious code in bioql PyPI...

8.5AI score0.00261EPSS
Exploits0References9
OSV
OSV
added 2025/06/26 12:34 p.m.14 views

USN-7602-1 linux-xilinx-zynqmp vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 It was discovered that the CIFS network file system...

8.8CVSS7AI score0.12727EPSS
Exploits3References197
OSV
OSV
added 2025/06/24 6:35 p.m.7 views

USN-7597-2 linux-azure-fips vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 Several security issues were discovered in the Linu...

8.8CVSS6.8AI score0.02033EPSS
Exploits0References67
OSV
OSV
added 2025/05/05 7:36 a.m.2 views

SUSE-SU-2025:1449-1 Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024144 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE bsc1240840. - CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431...

8.8CVSS7.2AI score0.02033EPSS
Exploits0References5
OSV
OSV
added 2025/04/29 11:22 a.m.3 views

SUSE-SU-2025:20214-1 Security update for kernel-livepatch-MICRO-6-0_Update_3

This update for kernel-livepatch-MICRO-6-0Update3 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in deviceforeachchild bsc1235008 - CVE-2024-53082: Fixed virtionet: Add hashkeylength check bsc1233677 - CVE-2024-8805: Fixed BlueZ HID over GATT Profile Improper...

8.8CVSS6.9AI score0.02033EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2024-8805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra...

8.8CVSS7.7AI score0.02033EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/02/13 12:0 a.m.11 views

Photon OS 4.0: Linux PHSA-2025-4.0-0754

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0754. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8.8CVSS9.3AI score0.02033EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/02/13 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2025:0202-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.02033EPSS
Exploits0References23
OpenVAS
OpenVAS
added 2025/02/13 12:0 a.m.10 views

SUSE: Security Advisory (SUSE-SU-2025:0236-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.02033EPSS
Exploits1References92
OSV
OSV
added 2024/12/17 4:15 p.m.1 views

DEBIAN-CVE-2024-53144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE This aligned BR/EDR JUSTWORKS method with LE which since 92516cd97fd4 "Bluetooth: Always request for user confirmation for Just Works" always request user confirmation wi...

5.5CVSS5.7AI score0.00261EPSS
Exploits0References1
CVE
CVE
added 2024/12/17 3:55 p.m.3047 views

CVE-2024-53144

CVE-2024-53144 corresponds to a Linux kernel Bluetooth issue: “Bluetooth: hci_event: Align BR/EDR JUST_WORKS pairing with LE” which aligns BR/EDR JUST_WORKS with LE and interacts with policy that now requires user confirmation. Connected items show concrete detail for CVE-2024-8805 (BlueZ HID ove...

5.5CVSS6.6AI score0.02033EPSS
Exploits0References10Affected Software1
Cvelist
Cvelist
added 2024/12/17 3:55 p.m.31 views

CVE-2024-53144 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE This aligned BR/EDR JUSTWORKS method with LE which since 92516cd97fd4 "Bluetooth: Always request for user confirmation for Just Works" always request user confirmation wi...

0.02033EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2024/11/22 9:2 p.m.15 views

CVE-2024-8805

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

8.8CVSS8.6AI score0.02033EPSS
Exploits0
OSV
OSV
added 2024/11/22 9:2 p.m.15 views

CVE-2024-8805 BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

8.8CVSS7.7AI score0.02033EPSS
Exploits0References4
Rows per page
Query Builder