Lucene search
K

54 matches found

NVD
NVD
added 3 days ago7 views

CVE-2026-49186

The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...

9.8CVSS0.00042EPSS
Exploits0References1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-34200

The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...

9.8CVSS5.8AI score0.00042EPSS
Exploits0References1
Cvelist
Cvelist
added 3 days ago31 views

CVE-2026-49186 Lack of MQTT Broker Topic Access Control Lists

The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...

8.6CVSS0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago4 views

CVE-2026-49186

The local MQTT broker does not enforce topic-level Access Control Lists ACLs. This allows any client to subscribe using wildcard characters or + to enumerate hidden network devices or publish rogue control commands...

8.6CVSS5.8AI score0.00042EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/24 12:4 a.m.1 views

CVE-2026-35064

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.8AI score0.00081EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.2 views

PT-2026-34806

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are...

8.7CVSS5.8AI score0.00081EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.6 views

SenseLive X3050 访问控制错误漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the exposure of management protocols via the discovery function. This vulnerability could allo...

8.7CVSS5.8AI score0.00081EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2026/04/09 12:0 a.m.66 views

📄 Spectrum ANOG Device Credential Extraction / Command Injection

This Metasploit auxiliary module targets Spectrum/ANOG devices and combines credential extraction, password decryption, and remote command execution through an authenticated command injection flaw...

6.1AI score
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8957

Malicious code in bioql PyPI...

5CVSS6.4AI score0.00052EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-48007

Malicious code in bioql PyPI...

6.5CVSS6.3AI score0.00234EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2960

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00024EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/09/19 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-53362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1...

5.5CVSS6.1AI score0.00017EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/17 6:53 p.m.1 views

CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 2025/09/17 3:15 p.m.4 views

CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

5.5CVSS0.00017EPSS
Exploits0References3
OSV
OSV
added 2025/09/17 3:15 p.m.1 views

DEBIAN-CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

5.5CVSS5.3AI score0.00017EPSS
Exploits0References1
OSV
OSV
added 2025/09/17 3:15 p.m.0 views

UBUNTU-CVE-2023-53362

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

5.5CVSS5.7AI score0.00017EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/09/17 2:56 p.m.3 views

CVE-2023-53362 bus: fsl-mc: don't assume child devices are all fsl-mc devices

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

6.1AI score0.00017EPSS
Exploits0References3
CVE
CVE
added 2025/09/17 2:56 p.m.20 views

CVE-2023-53362

CVE-2023-53362 : Linux kernel fix for bus: fsl-mc – do not assume all child devices are fsl-mc devices. The fix adds a device-type check when enumerating fsl-mc child devices to prevent a VFIO binding crash caused by a mis-created pseudo-device. Affected: Linux kernel (fsl-mc VFIO path); Root cau...

5.5CVSS6.1AI score0.00017EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/09/17 2:56 p.m.7 views

CVE-2023-53362 bus: fsl-mc: don't assume child devices are all fsl-mc devices

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: don't assume child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as child of fsl-mc devices causing a crash 1 when trying to bind a fsl-mc device to VFIO. Fix this by checking th...

0.00017EPSS
Exploits0References3
Rows per page
Query Builder