Lucene search
+L

4760 matches found

Positive Technologies
Positive Technologies
added 2021/11/12 12:00 a.m.13 views

PT-2021-21922 · Binatone · Motorola-Branded Binatone Hubble Cameras

Name of the Vulnerable Software and Affected Versions: Motorola-branded Binatone Hubble Cameras affected versions not specified Description: An improper access control issue was reported, allowing an unauthenticated attacker on the same network as the device to access administrative pages. This...

6.5CVSS5.4AI score0.00695EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.15 views

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC HDMI Firmware Update Tool that allows privileged escalation. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:CVEID: cve - 201 -0096...

7.8CVSS7.4AI score0.00221EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.10 views

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC HDMI Firmware Update Tool that allows privileged escalation. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details:CVEID: cve - 201 -0096...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/10 12:00 a.m.13 views

Intel NUC 授权问题漏洞

The Intel NUC is a small mini computer from Intel USA. An authorization issue vulnerability exists in the Intel NUC HDMI Firmware Update Tool, which originates from a privilege management error in the product's installer. An attacker could cause privilege escalation through this vulnerability...

7.8CVSS7.4AI score0.00227EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2021/11/09 9:34 a.m.13 views

alsa-sof-firmware bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/11/08 3:57 a.m.53 views

Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities (CVE-2020-25648, CVE-2021-31535, CVE-2021-20305, CVE-2020-25692)

Summary IBM QRadar Network Security has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2020-25648 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox is vulnerable to a denial of service, caused by improper handling of CCS ChangeCipherSpec...

9.8CVSS0.6AI score0.10634EPSS
SaveExploits2Affected Software1
HPE Security Bulletins
HPE Security Bulletins
added 2021/11/01 12:00 a.m.15 views

HPESBHF04205 rev.1 - HPE Edgeline EL300 Converged Edge Systems Using Certain Intel Processors, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline EL300 Converged Edge System Prior to BIOS: EL011.40 09/25/2021; prior to ME: v11.8.86.3909 CVSS Scores: | CVE | CVSS Vector | Base Scor...

6.4CVSS6.5AI score0.00383EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/10/30 12:00 a.m.10 views

Fedora: Security Advisory for watchdog (FEDORA-2021-4cf4b682e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/10/28 12:00 a.m.30 views

PT-2021-4632 · NetGear · Rax45 +30

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400 versions R6400 through R6400v2 NETGEAR R6700 versions R6700v3 NETGEAR R6900P NETGEAR R7000 versions R7000 through R7000P NETGEAR R7850 NETGEAR R7900P NETGEAR R7960P NETGEAR R8000 versions R8000 through R8000P NETGEAR RAX15 NETGE...

8.8CVSS9AI score0.00576EPSS
SaveExploits0References8
OSV
OSV
added 2021/10/27 1:15 a.m.11 views

CVE-2021-37127

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Affected product version...

7.2CVSS5.8AI score0.00716EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/27 1:15 a.m.22 views

Design/Logic Flaw

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Affected product version...

9CVSS6.9AI score0.00716EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/10/27 12:31 a.m.31 views

CVE-2021-37127

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Affected product version...

7.1AI score0.00716EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/27 12:31 a.m.60 views

CVE-2021-37127

CVE-2021-37127 corresponds to a signature management vulnerability in Huawei iManager NetEco products. The issue allows forging a signature to bypass signature checks during firmware updates, potentially causing a forged system file to overwrite the legitimate one. Affected versions include iMana...

9CVSS6.9AI score0.00716EPSS
SaveExploits0References1Affected Software1
Huawei
Huawei
added 2021/10/20 12:00 a.m.38 views

Security Advisory - Improper Signature Management Vulnerability in Some Huawei Products

There is a signature management vulnerability in some huawei products. An attacker can forge signature and bypass the signature check. During firmware update process, successful exploit this vulnerability can cause the forged system file overwrite the correct system file. Vulnerability ID:...

9CVSS6.9AI score0.00716EPSS
SaveExploits0Affected Software2
NVD
NVD
added 2021/10/19 3:15 p.m.23 views

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

6.1CVSS0.0055EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/19 3:15 p.m.16 views

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

6.1CVSS5.7AI score0.0055EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/19 3:15 p.m.21 views

Cross site scripting

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

4.3CVSS6AI score0.0055EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/10/19 2:10 p.m.32 views

CVE-2021-26589

A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting XSS because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE...

6.2AI score0.0055EPSS
SaveExploits0References1
Lenovo
Lenovo
added 2021/10/12 5:47 p.m.8 views

ThinkPad BIOS Vulnerabilities - Lenovo Support US

No description provided...

7.2CVSS6.9AI score0.00279EPSS
SaveExploits0
ICS
ICS
added 2021/10/12 12:00 a.m.53 views

Siemens RUGGEDCOM ROX Devices

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: RUGGEDCOM ROX Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to cause a...

7.8CVSS7.9AI score0.00978EPSS
SaveExploits0References11
Rows per page
Query Builder