Lucene search
+L

13512 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/05/24 12:00 a.m.22 views

Trend Micro Apex Central Cross-Site Scripting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Deep...

6.1CVSS6.9AI score0.00683EPSS
SaveExploits0References1
Circl
Circl
added 2023/05/23 7:25 a.m.14 views

CVE-2020-20012

creationtimestamp| type| source ---|---|--- 2023-05-23 07:25:14+00:00| seen| https://t.me/cibsecurity/64594...

9.8CVSS8.7AI score0.01083EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/23 1:15 a.m.13 views

CVE-2023-31994

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

5.3CVSS6.1AI score0.00562EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/23 1:15 a.m.34 views

CVE-2023-31994

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

5.3CVSS5.3AI score0.00562EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/05/23 1:15 a.m.16 views

CVE-2023-31994

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

5.3CVSS5.8AI score0.00562EPSS
SaveExploits0References3
Prion
Prion
added 2023/05/23 1:15 a.m.28 views

Design/Logic Flaw

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

5CVSS5.3AI score0.00562EPSS
SaveExploits0References2Affected Software337
Cvelist
Cvelist
added 2023/05/23 12:00 a.m.42 views

CVE-2023-31994

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

5.6AI score0.00562EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.13 views

PT-2023-23559 · Hanwha · Hanwha Ip Camera Ane-L7012R +1

Name of the Vulnerable Software and Affected Versions: Hanwha IP Camera ANE-L7012R version 1.41.01 Hanwha IP Camera XNV-9082R version 2.10.02 Description: The issue is related to a Denial of Service DoS condition. It occurs when an empty UDP packet is sent to the listening service, causing the...

5.3CVSS7.2AI score0.00562EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/22 11:15 p.m.13 views

CVE-2022-47320

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

8.1CVSS5.8AI score0.00506EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/22 11:15 p.m.31 views

CVE-2022-47320

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

8.1CVSS8AI score0.00506EPSS
SaveExploits0References2
Prion
Prion
added 2023/05/22 11:15 p.m.26 views

Default configuration

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

5.5CVSS8.3AI score0.00506EPSS
SaveExploits0References2Affected Software22
Cvelist
Cvelist
added 2023/05/22 10:30 p.m.40 views

CVE-2022-47320 CVE-2022-47320

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

8.1CVSS8.1AI score0.00506EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/05/22 10:30 p.m.10 views

CVE-2022-47320 CVE-2022-47320

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes...

8.1CVSS6.8AI score0.00506EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/22 10:30 p.m.67 views

CVE-2022-47320

CVE-2022-47320 affects Dataprobe iBoot-PDU FW prior to 1.42.06162022. The issue is an authentication bypass using an alternate path/channel in the iBoot device’s basic discovery protocol, which can expose device information and allow configuration changes. Affected component: iBoot-PDU firmware (...

8.1CVSS8AI score0.00506EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/05/22 8:36 p.m.60 views

GHSA-J8R2-6X86-Q33Q Unintended leak of Proxy-Authorization header in requests

Impact Since Requests v2.3.0, Requests has been vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuildproxies is used to recompute and reattach the Proxy-Authorization header to...

6.1CVSS6.7AI score0.02974EPSS
SaveExploits2References10
CNNVD
CNNVD
added 2023/05/22 12:00 a.m.11 views

Dataprobe iBoot-PDU 安全漏洞

The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in the Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the iBoot device's basic discovery protocol displaying the initial device...

8.1CVSS7.7AI score0.00506EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
added 2023/05/19 5:49 p.m.17 views

sherna.ruhotel.su Cross Site Scripting vulnerability OBB-3355326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Debian CVE
Debian CVE
added 2023/05/17 12:00 a.m.54 views

CVE-2023-31723

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...

5.5CVSS6.7AI score0.00288EPSS
SaveExploits1
Openbugbounty
Openbugbounty
added 2023/05/15 7:02 p.m.14 views

s.cocktailtyper.com Cross Site Scripting vulnerability OBB-3339884

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2023/05/15 11:15 a.m.20 views

CVE-2023-23448

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code...

5.3CVSS6.1AI score0.00792EPSS
SaveExploits0References4
Rows per page
Query Builder