4772 matches found
Exploit for CVE-2024-52544
Lorex 2K Indoor Wi-Fi Security Camera: RCE Exploit Chain O...
GeoVision GV-ADR2701 Improper Authentication (CVE-2023-3638)
In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Rakuten Turbo 5G 访问控制错误漏洞
The Rakuten Turbo 5G is a home router from Rakuten that requires no construction and plugs into an electrical outlet. An access control error vulnerability exists in Rakuten Turbo 5G V1.3.18 and earlier versions that stems from a lack of authentication for critical functions, where an...
CVE-2022-20766
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to an out-of-bounds read when processing Cisco...
CVE-2022-20766 Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to an out-of-bounds read when processing Cisco...
PT-2024-9033 · Tp Link · Tp-Link Vn020 F3V(T) Tt V6.2.1021
Name of the Vulnerable Software and Affected Versions: TP-Link VN020 F3vT TT V6.2.1021 Description: A critical vulnerability has been found in the DHCP DISCOVER Packet Parser component of TP-Link devices. The manipulation of the hostname argument leads to a stack-based buffer overflow. This issue...
CVE-2024-48974 Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates
The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This...
CVE-2024-48974 Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates
The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This...
PT-2024-16782 · Tcl · Tcl Camera
Name of the Vulnerable Software and Affected Versions: TCL products affected versions not specified Description: The default TCL Camera application has a path traversal vulnerability in its provider. A malicious application can supply a malicious URI path, allowing it to delete arbitrary files fr...
Baxter Life2000 安全漏洞
The Baxter Life2000 is a mask-less non-invasive ventilator from Baxter. A security vulnerability exists in Baxter Life2000 version 06.08.00.00 and earlier, which stems from improper file integrity checking when applying a firmware update, allowing an attacker to push a compromised or illegal...
CVE-2024-36282
Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-34167
Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-34167
CVE-2024-34167 describes an uncontrolled search path vulnerability in the Intel Server Board S2600ST Family BIOS and Firmware Update software (all versions). Connected sources corroborate a local-privilege-escalation issue when an authenticated user gains local access, caused by improper handling...
CVE-2024-34167
Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-34167
Uncontrolled search path for the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-36282
Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-36282
CVE-2024-36282 concerns Intel® Server Board S2600ST Family BIOS and Firmware Update software. The vulnerability arises from improper input validation in the update software, allowing a privileged user to potentially escalate privileges via local access. Affected: BIOS and Firmware Update software...
Intel Server Board S2600ST 代码问题漏洞
The Intel Server Board S2600ST is a series of motherboards from Intel Corporation USA. A code issue vulnerability exists in the Intel Server Board S2600ST BIOS and Firmware Update that stems from an uncontrolled search path. An attacker can exploit the vulnerability to elevate privileges...
