Lucene search
+L

8735 matches found

OSV
OSV
added 2024/12/27 10:15 a.m.9 views

CVE-2020-9082

There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to...

4.6CVSS5.8AI score0.0023EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a debug register in the drm/vc4:hdmi module that may cause the system to hang when it hangs...

5.5CVSS5.8AI score0.00186EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/23 1:15 a.m.21 views

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...

5.3CVSS0.0058EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/23 12:18 a.m.9 views

CVE-2024-47864

home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote unauthenticated attacker may get the web console of the product down...

5.3CVSS5.7AI score0.0058EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/23 12:18 a.m.82 views

CVE-2024-47864

The CVE-2024-47864 issue affects Sharp home 5G HR02, Wi‑Fi STATION SH‑52B, and SH‑54C. It is a buffer overflow in the hidden debug function that can cause the product’s web console to go down. Evidence across multiple sources confirms the affected models and the vulnerability class, but explicit ...

5.3CVSS7.9AI score0.0058EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/23 12:17 a.m.9 views

CVE-2024-46873

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker...

9.8CVSS7.5AI score0.00742EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/23 12:17 a.m.23 views

CVE-2024-46873

Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker...

9.8CVSS0.00742EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/23 12:17 a.m.58 views

CVE-2024-46873

CVE-2024-46873 concerns SHARP routers (SH-05L, SH-52B, SH-54C, HR02). The root cause is a hidden debug function that, when enabled, allows a remote unauthenticated attacker to execute arbitrary OS commands with root privileges. Public docs confirm this vulnerability alongside other SHARP router C...

9.8CVSS7.8AI score0.00742EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/23 12:0 a.m.17 views

PT-2024-32856 · Unknown · Home 5G Hr02 +2

Name of the Vulnerable Software and Affected Versions: home 5G HR02 affected versions not specified Wi-Fi STATION SH-52B affected versions not specified Wi-Fi STATION SH-54C affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the hidden debug...

5.3CVSS7.7AI score0.0058EPSS
SaveExploits0References7
OSV
OSV
added 2024/12/20 11:15 a.m.5 views

CVE-2024-7726

There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...

5.7CVSS6AI score0.00395EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2024/12/19 3:49 a.m.12 views

SUSE CVE-2024-53257

Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...

4.9CVSS6.8AI score0.00428EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:0 a.m.9 views

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an ASP.NET configuration error. Creating a binary debug file allows a malicious actor to gain unauthorized access to confidential information.

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an error in ASP.NET configuration: the creation of a binary debug file. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

5.3CVSS5.5AI score0.00567EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/18 7:15 p.m.28 views

CVE-2024-49201

Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...

4.3CVSS0.00284EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.9 views

Remote File Orchestrator Extension 安全漏洞

Remote File Orchestrator Extension is an open source remote file orchestrator extension for Keyfactor. It is used to remotely manage various file-based certificate stores and can be easily extended to manage other certificate stores. A security vulnerability exists in Remote File Orchestrator...

4.3CVSS6.3AI score0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/18 12:0 a.m.12 views

CVE-2024-49201

Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...

6.8AI score0.00284EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/18 12:0 a.m.56 views

CVE-2024-49201

CVE-2024-49201 affects Keyfactor Remote File Orchestrator (remote-file-orchestrator) before 2.8.1. The issue is information disclosure via debug logging, exposing sensitive data at logging level. Affected version range: 2.8 and earlier; fixed in 2.8.1 (per sources). Impact is information leakage;...

4.3CVSS6.3AI score0.00284EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/18 12:0 a.m.20 views

CVE-2024-49201

Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...

0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/18 12:0 a.m.10 views

CVE-2024-49201

Keyfactor Remote File Orchestrator aka remote-file-orchestrator 2.8 before 2.8.1 allows Information Disclosure: sensitive information could be exposed at the debug logging level...

4.3CVSS6.8AI score
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/12/16 10:54 p.m.42 views

Multiple vulnerabilities in SHARP routers

Overview SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 - CVE-2024-45721 The hidden debug function is enabled CWE-489 - CVE-2024-46873 Buffer overflow vulnerability in the hidden debug function CWE-120 -...

9.8CVSS8.1AI score0.01211EPSS
SaveExploits0References15
Friends Of PHP
Friends Of PHP
added 2024/12/13 3:51 p.m.31 views

Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page

Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page Vulnerability Overview The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. Identifier :...

8CVSS5.5AI score0.00578EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder