Lucene search
+L

2403 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:00 a.m.22 views

(0Day) Deep Sea Electronics DSE855 Configuration Backup Missing Authentication Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based UI. The issue results from the lack ...

6.5CVSS6.1AI score0.02418EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.20 views

PT-2024-37261 · Deep Sea Electronics · Dse855

Name of the Vulnerable Software and Affected Versions: Deep Sea Electronics DSE855 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of Deep Sea Electronics DSE855 devices. The specific flaw exists...

6.5CVSS6.5AI score0.02418EPSS
SaveExploits3References11
CNNVD
CNNVD
added 2024/06/13 12:00 a.m.14 views

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the handling of multipart form variables that lacks proper validation of the length of...

8.8CVSS7.1AI score0.01118EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/13 12:00 a.m.11 views

PT-2024-37263 · Deep Sea Electronics · Dse855

Name of the Vulnerable Software and Affected Versions: Deep Sea Electronics DSE855 affected versions not specified Description: This issue allows network-adjacent attackers to create a denial-of-service condition on affected installations of Deep Sea Electronics DSE855 devices. The specific flaw...

6.5CVSS6.6AI score0.0058EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/13 12:00 a.m.8 views

Deep Sea Electronics DSE855 Security Vulnerability

Deep Sea Electronics DSE855 is a USB to Ethernet communication device from Deep Sea Electronics, UK. A security vulnerability exists in the Deep Sea Electronics DSE855 that stems from a specific flaw in the handling of multipart boundaries, where there is a lack of validation of the length of...

8.8CVSS7AI score0.01108EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:00 a.m.27 views

(0Day) Deep Sea Electronics DSE855 Restart Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based UI. The issue results from the lack of...

4.3CVSS6.8AI score0.00603EPSS
SaveExploits0
CNVD
CNVD
added 2024/06/12 12:00 a.m.11 views

Trend Micro Deep Security Elevation of Privilege Vulnerability

Trend Micro Deep Security is the United States Trend Micro Trend Micro, a server depth of security protection system client. An elevation of privilege vulnerability exists in Trend Micro Deep Security, which can be exploited by an attacker to elevate privileges and execute arbitrary code in the...

7.8CVSS7.6AI score0.00532EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 7:16 p.m.27 views

CVE-2024-34406

Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link...

5.3CVSS0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/11 7:16 p.m.44 views

CVE-2024-34405

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app...

9.1CVSS0.00472EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/11 12:00 a.m.14 views

CVE-2024-34406

Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link...

6.8AI score0.00357EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/06/11 12:00 a.m.41 views

CVE-2024-34405

Improper deep link validation in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to launch an arbitrary URL within the app...

0.00472EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/11 12:00 a.m.61 views

CVE-2024-34405

The CVE-2024-34405 entry concerns McAfee Security: Antivirus VPN for Android prior to version 8.3.0. The issue is described as improper deep link validation, which could allow an attacker to launch an arbitrary URL from within the app. The RedHat/CNNVD/CVE ecosystem sources corroborate the genera...

9.1CVSS7AI score0.00472EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/11 12:00 a.m.10 views

McAfee Security Antivirus VPN for Android Security Vulnerability

McAfee Security Antivirus VPN for Android is a cybersecurity software from McAfee USA. A security vulnerability exists in McAfee Security Antivirus VPN for Android prior to version 8.3.0, which stems from improper deep link validation and allows an attacker to launch arbitrary URLs within the...

9.1CVSS6.8AI score0.00472EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/06/11 12:00 a.m.10 views

McAfee Security Antivirus VPN for Android Security Vulnerability

McAfee Security Antivirus VPN for Android is a network security software from McAfee, Inc. A security vulnerability exists in McAfee Security Antivirus VPN for Android prior to version 8.3.0, which stems from an improper exception handling that could allow an attacker to cause a denial of service...

5.3CVSS6.6AI score0.00357EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/06/11 12:00 a.m.9 views

PT-2024-5070 · Mcafee · Mcafee Security: Antivirus Vpn For Android

Name of the Vulnerable Software and Affected Versions: McAfee Security: Antivirus VPN for Android versions prior to 8.3.0 Description: The issue is related to improper exception handling, which could allow an attacker to cause a denial of service through the use of a malformed deep link. This can...

6.5CVSS7.3AI score0.00357EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2024/06/11 12:00 a.m.30 views

CVE-2024-34406

Improper exception handling in McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link...

0.00357EPSS
SaveExploits0References2
CVE
CVE
added 2024/06/11 12:00 a.m.53 views

CVE-2024-34406

Summary: CVE-2024-34406 affects McAfee Security: Antivirus VPN for Android, specifically versions prior to 8.3.0. The issue is described as improper exception handling that could allow an attacker to cause a denial of service through the use of a malformed deep link. What’s affected: Android app ...

5.3CVSS6.8AI score0.00357EPSS
SaveExploits0References2
OSV
OSV
added 2024/06/10 10:15 p.m.9 views

CVE-2024-36358

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS6AI score0.00532EPSS
SaveExploits0References2
NVD
NVD
added 2024/06/10 10:15 p.m.44 views

CVE-2024-36358

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS0.00532EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/10 9:21 p.m.24 views

CVE-2024-36358

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS7.1AI score0.00532EPSS
SaveExploits0References2
Rows per page
Query Builder