Lucene search
K

49 matches found

Positive Technologies
Positive Technologies
added 2025/05/22 12:0 a.m.2 views

PT-2025-22475 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the DEBUG Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. Recommendations: For FreeFlo...

9.8CVSS7.5AI score0.00479EPSS
Exploits1References8
Cvelist
Cvelist
added 2025/01/29 12:0 a.m.13 views

CVE-2025-24527

An issue was discovered in Akamai Enterprise Application Access EAA before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector...

8CVSS0.00127EPSS
Exploits0References2
OSV
OSV
added 2023/11/28 3:15 a.m.2 views

CVE-2023-5797

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

5.5CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2023/11/28 2:15 a.m.1 views

CVE-2023-37925

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

5.5CVSS5.8AI score0.00072EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/28 12:0 a.m.1 views

Zyxel ATP Security Vulnerability

Zyxel ATP is a firewall from Zyxel, China. Zyxel ATP series 4.32 to 5.37 firmware versions, USG FLEX series 4.50 to 5.37 firmware versions, USG FLEX 50W series 4.16 to 5.37 firmware versions, USG20W-VPN series 4.16 to 5.3 firmware versions, VPN series 4.30 to 5.37 firmware versions, NWA50AX...

5.5CVSS6.5AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2023/08/22 7:16 p.m.12 views

CVE-2023-38996

An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command...

6.7CVSS6.6AI score0.00076EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/08/22 7:16 p.m.2 views

CVE-2023-38996

An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command...

6.7CVSS7AI score0.00076EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/08/22 12:0 a.m.14 views

CVE-2023-38996

An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command...

7.4AI score0.00076EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.1 views

PT-2023-7305 · Zyxel · Zyxel Nwa50Ax +8

Name of the Vulnerable Software and Affected Versions: Zyxel ATP series versions 4.32 through 5.37 Zyxel USG FLEX series versions 4.50 through 5.37 Zyxel USG FLEX 50W series versions 4.16 through 5.37 Zyxel USG20W-VPN series versions 4.16 through 5.37 Zyxel VPN series versions 4.30 through 5.37...

5.5CVSS5.4AI score0.00072EPSS
Exploits0References6
VulnCheck KEV
VulnCheck KEV
added 2023/02/08 12:0 a.m.1 views

VulnCheck KEV: CVE-2010-2261

Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 data2 and 2 data3 parameters to a Debugcommandpage.asp and b debug.cgi...

10CVSS6.1AI score0.01689EPSS
Exploits0References1
NVD
NVD
added 2021/08/12 12:15 a.m.9 views

CVE-2021-38591

An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can change some of the NvRAM content by leveraging the misconfiguration of a debug command. The LG ID is LVE-SMP-210005 August 2021...

3.3CVSS0.00018EPSS
Exploits0References1
OSV
OSV
added 2021/08/12 12:15 a.m.0 views

CVE-2021-38591

An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can change some of the NvRAM content by leveraging the misconfiguration of a debug command. The LG ID is LVE-SMP-210005 August 2021...

3.3CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2021/08/12 12:15 a.m.20 views

Design/Logic Flaw

An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can change some of the NvRAM content by leveraging the misconfiguration of a debug command. The LG ID is LVE-SMP-210005 August 2021...

2.1CVSS4.4AI score0.00018EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/11 11:12 p.m.16 views

CVE-2021-38591

An issue was discovered on LG mobile devices with Android OS P and Q software for mt6762/mt6765/mt6883. Attackers can change some of the NvRAM content by leveraging the misconfiguration of a debug command. The LG ID is LVE-SMP-210005 August 2021...

4.5AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2021/08/11 11:12 p.m.55 views

CVE-2021-38591

CVE-2021-38591 affects LG mobile devices running Android P/Q on mt6762/mt6765/mt6883. Root cause: misconfiguration of a debug command that allows attackers to modify NvRAM content. Documented impact is limited to NvRAM manipulation; no exploit details or in‑the‑wild data are provided. No remediat...

3.3CVSS4.3AI score0.00018EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/08/11 12:0 a.m.3 views

LG mobile 安全漏洞

LG mobile is a line of mobile device products from LG. A security vulnerability exists in LG mobile devices, which stems from a misconfiguration of the debug command that can be exploited to change some NvRAM contents...

3.3CVSS5AI score0.00018EPSS
Exploits0References2
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.3 views

Medtronic MyCareLink Smart Model 25000 Patient Reader Buffer Error Vulnerability

The Medtronic MyCareLink Smart Model 25000 Patient Reader is a reader used in the healthcare industry to visually interact with medical devices from Medtronic, Inc. The Medtronic MyCareLink Smart Model 25000 Patient Reader suffers from a buffer error vulnerability that stems from the susceptibili...

10CVSS7.7AI score0.01274EPSS
Exploits0References5
Talos
Talos
added 2020/10/29 12:0 a.m.60 views

Synology SRM lbd service Command Execution Vulnerability

Summary An exploitable command execution vulnerability exists in the lbd service functionality of Qualcomm lbd 1.1, as present in Synology SRM 1.2.3 RT2600ac 8017-5. A specially crafted debug command can overwrite arbitrary files with controllable content, resulting in remote code execution. An...

9.8CVSS10AI score0.03589EPSS
Exploits1
NVD
NVD
added 2020/09/08 10:15 a.m.15 views

CVE-2020-11117

u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018,...

9.8CVSS9.7AI score0.03589EPSS
Exploits1References2
Prion
Prion
added 2020/09/08 10:15 a.m.21 views

Remote code execution

u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resulting in remote code execution.' in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018,...

7.5CVSS9.6AI score0.03589EPSS
Exploits1References2
Rows per page
Query Builder