Lucene search
+L

1407 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•0 views

CVE-2024-11346: Access of Resource Using Incompatible Type

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

7.3CVSS5.8AI score0.00448EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 4:50 p.m.•11 views

Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
•added 2025/02/03 4:50 p.m.•9 views

MAL-2025-818 Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/01/13 12:00 a.m.•26 views

The vulnerability of the switch network firewall for HPE CX 10000 corporate networks allows a intruder to disclose protected information.

The vulnerability of the switch network firewalls for HPE CX 10000 corporate networks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

3.4CVSS5.5AI score0.00229EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/01/11 12:00 a.m.•14 views

WordPress plugin Coupon X 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS7.9AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/11 12:00 a.m.•14 views

PT-2025-1777 · WordPress · The Coupon X: Discount Pop Up

Name of the Vulnerable Software and Affected Versions: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress versions up to, and including, 1.3.5 Description: The issue is related to missing capability checks on several functions in the...

5.4CVSS7.2AI score0.00247EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/11 12:00 a.m.•0 views

CVE-2024-12204: Missing Authorization

The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it...

5.4CVSS5.7AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/08 9:15 p.m.•17 views

CVE-2024-54010

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

3.4CVSS0.00229EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/08 8:42 p.m.•98 views

CVE-2024-54010

CVE-2024-54010 describes a vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches. An unauthenticated adjacent attacker could perform a packet forwarding attack against ICMP and UDP if the switch is configured to allow Layer 3 routing. The attack relies on routin...

3.4CVSS4AI score0.00229EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/08 12:00 a.m.•15 views

PT-2025-1019 · Hewlett Packard · Hpe Aruba Networking Cx 10000 Series Switches

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking CX 10000 Series Switches affected versions not specified Description: A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists, which could allow an unauthenticated adjacent attack...

3.4CVSS7AI score0.00229EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•1 views

CVE-2024-54010: Incorrect Authorization

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

3.4CVSS5.8AI score0.00229EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•14 views

Hewlett Packard Enterprise CX 10000 安全漏洞

The Hewlett Packard Enterprise CX 10000 HPE CX 10000 is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise CX 10000 that stems from a firewall component that allows an unauthenticated adjacent attacker to perform packet...

3.4CVSS6.7AI score0.00229EPSS
SaveExploits0References3
HPE Security Bulletins
HPE Security Bulletins
•added 2025/01/08 12:00 a.m.•15 views

HPESBNW04772 rev.1 - Aruba CX 10000 Switch Series, Traffic Handling Vulnerability

Potential Security Impact: Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See summary for affected versions. Affected Products HPE Aruba Networking CX 10000 Switch Series running the following CX Operating System...

3.4CVSS6.1AI score0.00229EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•23 views

Barco多款产品 安全漏洞

Barco ClickShare CX-30/20 and others are products of Barco Belgium.Barco ClickShare CX-30/20 is a seamless wireless conferencing solution for small and medium-sized meeting rooms.Barco ClickShare C-5/10 is a seamless wireless The Barco ClickShare Bar Pro/Core is an advanced all-in-one video...

7.6CVSS6.9AI score0.00446EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/12/03 12:00 a.m.•14 views

The vulnerability of the OMRON CX-Motion Pro controller management program lies in the improper restriction of references to external XML entities (XXE). This allows attackers to access protected information.

The vulnerability of the OMRON CX-Motion Pro controller management program is related to an improper restriction on references to external XML entities XXE. Exploiting this vulnerability may allow a perpetrator to access protected information through a specially created project file...

5.5CVSS5.9AI score0.00211EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2024/11/27 5:15 p.m.•30 views

CVE-2024-51228

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...

6.8CVSS0.03898EPSS
SaveExploits0References5
CVE
CVE
•added 2024/11/27 12:00 a.m.•100 views

CVE-2024-51228

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...

6.8CVSS8.1AI score0.03898EPSS
SaveIn wildExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•1 views

CVE-2024-51228: Improper Neutralization of Special Elements used in an OS Command

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...

6.8CVSS6.5AI score0.03898EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/27 12:00 a.m.•19 views

PT-2024-34567 · Totolink · Totolink-Cx-N150Rt +3

Name of the Vulnerable Software and Affected Versions: TOTOLINK-CX-A3002RU version 1.0.4-B20171106.1512 TOTOLINK-CX-N150RT version 2.1.6-B20171121.1002 TOTOLINK-CX-N300RT versions 2.1.6-B20170724.1420 through 2.1.8-B20191010.1107 TOTOLINK-CX-N302RE version 2.0.2-B20170511.1523 Description: A...

6.8CVSS7.8AI score0.03898EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/11/27 12:00 a.m.•24 views

CVE-2024-51228

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...

8.1AI score0.03898EPSS
SaveExploits0References5
Rows per page
Query Builder