Lucene search
+L

13913 matches found

Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.14 views

PT-2023-28529 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, which could allow writing permission usage records of an app. This may lead to local information...

5.5CVSS5.2AI score0.00095EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.13 views

PT-2023-28522 · Unknown · Firewall Service

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges. This...

5.5CVSS5.2AI score0.00095EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.10 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.11 views

PT-2023-28530 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, which could allow writing permission usage records of an app. This may lead to local information...

5.5CVSS5.2AI score0.00095EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.9 views

PT-2023-28534 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue concerns a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges. This could...

5.5CVSS5.3AI score0.00095EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.13 views

PT-2023-28521 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges. This...

5.5CVSS5.1AI score0.00095EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.11 views

PT-2023-28536 · Unknown · Firewall Service

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue concerns a missing permission check in the firewall service, allowing potential local information disclosure without requiring additional execution privileges...

5.5CVSS5.3AI score0.00095EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/04 12:00 a.m.11 views

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

5.5CVSS7.1AI score0.00095EPSS
SaveExploits0References1
Atlassian
Atlassian
added 2023/12/01 3:01 p.m.38 views

Confluence XHR requests have the wrong content type

h3. Problem Watching or Stop watching a Confluence page and other operations see below list of identified endpoints will generate a request like the one below copied as curl from HAR capture for convenience: code:java curl 'https://confluence/rest/api/user/watch/content/9999999' \ -X 'DELETE' \ -...

7.1AI score
SaveExploits0Affected Software1
The Hacker News
The Hacker News
added 2023/12/01 6:22 a.m.54 views

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage NAS, firewall, and access point AP devices, including three critical flaws that could lead to authentication bypass and command injection. The three vulnerabilities are listed below - CVE-2023-35138 CVSS...

9.8CVSS8.7AI score0.602EPSS
SaveExploits0
CNVD
CNVD
added 2023/12/01 12:00 a.m.40 views

Tenda AC10 SetFirewallCfg Function Buffer Overflow Vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the firewallEn parameter of the SetFirewallCfg function failing to correctly validate the length and size of the input data, which can be exploited by...

9.8CVSS8.3AI score0.00976EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2023/11/30 7:52 p.m.38 views

Eclipse IDE XXE in eclipse.platform

Impact xml files like ".project" are parsed vulnerable against all sorts of XXE attacks. The user just needs to open any evil project or update an open project with a vulnerable file for example for review a foreign repository or patch. Vulnerablility was found by static code analysis SonarLint...

5CVSS7.3AI score0.0039EPSS
SaveExploits1References15Affected Software8
ICS
ICS
added 2023/11/30 7:00 a.m.32 views

Mitsubishi Electric FA Engineering Software Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Mitsubishi Electric Equipment : FA Engineering Software Products Vulnerability : External Control of File Name or Path 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious...

7.8CVSS7.9AI score0.00261EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/11/30 12:00 a.m.13 views

PT-2023-8711 · Zyxel · Wax300H +6

Name of the Vulnerable Software and Affected Versions: ZyXEL USG FLEX versions 4.50 through 5.37 Patch 1 ZyXEL USG FLEX 50W/USG20W-VPN versions 4.16 through 5.37 Patch 1 ZyXEL USG FLEX H versions 1.10 through 1.10 Patch 1 ZyXEL ATP series firmware versions 4.32 through 5.37 Patch 1 NWA50AX firmwa...

8.3CVSS8.1AI score0.01333EPSS
SaveExploits0References11
OSV
OSV
added 2023/11/29 6:15 a.m.11 views

CVE-2023-45481

Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg...

9.8CVSS5.9AI score0.00976EPSS
SaveExploits1References2
Rows per page
Query Builder