Lucene search
+L

117 matches found

osv_cve
osv_cve
•added 2021/10/19 2:15 p.m.•13 views

CVE-2021-30810

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

4.3CVSS5.7AI score0.00529EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/10/19 2:15 p.m.•14 views

CVE-2021-30810

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

4.3CVSS5.2AI score0.00529EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/19 12:00 a.m.•8 views

CVE-2021-30810: Missing Authorization

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

4.3CVSS5.7AI score0.00529EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•25 views

Issues and vulnerabilities related to licensing of various Apple products

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating...

4.3CVSS5.1AI score0.00529EPSS
SaveExploits0References14
Veracode
Veracode
•added 2021/04/17 8:20 a.m.•39 views

Use-after-free

linux is vulnerable to use after free. An attacker is able to exploit the vulnerability via an I/O request at a certain point during device setup...

7CVSS3.2AI score0.00261EPSS
SaveExploits0References5Affected Software6
Microsoft CVE
Microsoft CVE
•added 2021/02/06 8:00 a.m.•13 views

nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup aka CID-b98e762e3d71.

...

7CVSS7AI score0.00261EPSS
SaveExploits0
NVD
NVD
•added 2021/02/05 10:15 p.m.•36 views

CVE-2021-3229

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...

7.8CVSS0.02709EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2021/02/05 10:15 p.m.•19 views

CVE-2021-3229

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...

7.5CVSS7.1AI score0.02709EPSS
SaveExploits1References3
Prion
Prion
•added 2021/02/05 10:15 p.m.•31 views

Denial of service

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...

7.8CVSS7.4AI score0.02709EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/02/05 12:00 a.m.•6 views

PT-2021-19694

Name of the Vulnerable Software and Affected Versions: ASUSWRT ASUS RT-AX3000 versions 3.0.0.4.384 10177 and earlier Description: The issue allows an attacker to disrupt the use of device setup services via continuous login error, resulting in a denial of service. Recommendations: For versions...

7.8CVSS0.02709EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/05 12:00 a.m.•7 views

CVE-2021-3229: Undefined Security Weakness

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...

7.8CVSS5.8AI score0.02709EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2021/02/01 4:15 a.m.•10 views

DEBIAN-CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.4AI score0.00261EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/01 4:15 a.m.•19 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.7AI score0.00261EPSS
SaveExploits0References5
Prion
Prion
•added 2021/02/01 4:15 a.m.•35 views

Design/Logic Flaw

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

4.4CVSS6.5AI score0.00261EPSS
SaveExploits0References4Affected Software2
osv_ubuntu
osv_ubuntu
•added 2021/02/01 4:15 a.m.•15 views

UBUNTU-CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.7AI score0.00261EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2021/02/01 4:15 a.m.•48 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.7AI score0.00261EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2021/02/01 3:43 a.m.•46 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7.1AI score0.00261EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/02/01 3:43 a.m.•44 views

CVE-2021-3348

nbdaddsocket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndbqueuerq use-after-free that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point during device setup, aka CID-b98e762e3d71...

7CVSS6.8AI score0.00261EPSS
SaveExploits0
attackerkb
attackerkb
•added 2020/06/04 4:15 p.m.•14 views

CVE-2020-9462

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

4.3CVSS5.5AI score0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/06/04 3:49 p.m.•43 views

CVE-2020-9462

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

4.7AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder