Lucene search
+L

1306 matches found

CNNVD
CNNVD
added 2022/01/14 12:0 a.m.9 views

Arista Networks Arista EOS安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

9.4CVSS8.2AI score0.01418EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/01 12:0 a.m.10 views

PUB-A-171742549

In of , there is a possible bypass of Factory Reset Protection due to . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/01 12:0 a.m.29 views

ASB-A-192663648

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00124EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/15 7:15 p.m.5 views

CVE-2021-1008

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product:...

4.4CVSS5.9AI score0.00107EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/15 7:15 p.m.11 views

Code injection

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product:...

2.1CVSS4.6AI score0.00107EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/12/15 6:6 p.m.71 views

CVE-2021-1008

CVE-2021-1008 affects Android 12; the issue is in addSubInfo of SubscriptionController.java, described as a logic error that could force a factory reset, yielding local denial of service with system privileges. Exploitation is stated as possible without user interaction. Connected documents corro...

4.4CVSS4.5AI score0.00107EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.6 views

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the US company Google. Google Android suffers from a denial-of-service vulnerability, which can be exploited by local attackers to perform a factory reset and cause a denial-of-service condition...

4.4CVSS5.6AI score0.00107EPSS
SaveExploits0References4
OSV
OSV
added 2021/12/01 12:0 a.m.7 views

PUB-A-197327688

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS7.3AI score0.00107EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/26 5:15 p.m.6 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS5.8AI score0.01127EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/26 5:15 p.m.20 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS0.01127EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/26 5:15 p.m.20 views

Hardcoded credentials

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

7.5CVSS9.3AI score0.01127EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/26 4:31 p.m.29 views

CVE-2021-26611 HejHome IP Camera use of hard-coded credentials vulnerability

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

8.1CVSS9.6AI score0.01127EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/11/26 12:0 a.m.6 views

HejHome Gkw-Ic052 信任管理问题漏洞

HejHome Gkw-Ic052 is an Ip camera from HejHome Korea. HejHome GKW-IC052 IP camera has a security vulnerability, this issue allows remote attackers to manipulate the IP camera. Reboot, restore factory settings, snapshot, etc...

9.8CVSS8.4AI score0.01127EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.17 views

The vulnerability of the SONICWALL Ethernet switch control interface of the SMA 100 series allows a intruder to alter the device’s configuration to the factory settings and trigger a failure in the target system’s service.

The vulnerability of the SMA 100 series SONICWALL network interface controllers is related to access control errors. Exploiting this vulnerability allows a malicious actor to alter the device’s configuration to the factory settings and cause failures in the target system’s services...

9.4CVSS8AI score0.80701EPSS
SaveExploits4References5Affected Software5
OSV
OSV
added 2021/10/06 6:15 p.m.7 views

CVE-2021-25474

Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...

4.4CVSS5.8AI score0.00101EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/06 6:15 p.m.29 views

CVE-2021-25474

Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...

4.9CVSS0.00101EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/06 6:15 p.m.18 views

Design/Logic Flaw

Assuming a shell privilege is gained, an improper exception handling for multisimbarshowonqspanel value in SystemUI prior to SMR Oct-2021 Release 1 allows an attacker to cause a permanent denial of service in user device before factory reset...

4.9CVSS4.8AI score0.00101EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/09/24 12:0 a.m.7 views

Sonicwall SMA100 路径遍历漏洞

The Sonicwall SMA100 is a secure access gateway device from Sonicwall, Inc. A path traversal vulnerability exists in the SonicWall SMA100 series that stems from improper access restrictions in the SMA 100 management interface. A remote, unauthenticated attacker could bypass the implemented path...

9.1CVSS8.6AI score0.80701EPSS
SaveExploits4References5
SonicWall
SonicWall
added 2021/09/23 9:24 p.m.24 views

Unauthenticated SMA100 arbitrary file delete vulnerability

An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. CVE: CVE-2021-20034 Last updated: Sept. 23, 2021, 9:24 p.m...

9.1CVSS7.2AI score0.80701EPSS
SaveExploits4
NVD
NVD
added 2021/07/24 11:15 p.m.37 views

CVE-2021-37436

Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing...

4.2CVSS0.00284EPSS
SaveExploits0References4
Rows per page
Query Builder