Lucene search
+L

26456 matches found

Microsoft CVE
Microsoft CVE
•added 2024/10/16 7:00 a.m.•13 views

scsi: ufs: core: Remove SCSI host only if added

...

5.5CVSS6.4AI score0.00235EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•29 views

CentOS 6 : flash-plugin (RHSA-2020:0513)

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0513 advisory. - Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion...

9.3CVSS8.4AI score0.10174EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•25 views

CentOS 6 : flash-plugin (RHSA-2020:4251)

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:4251 advisory. - Adobe Flash Player version 32.0.0.433 and earlier are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and...

9.3CVSS8.3AI score0.04255EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•32 views

CentOS 6 : flash-plugin (RHSA-2020:2547)

The remote CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2547 advisory. - Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft...

10CVSS8.9AI score0.0756EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/08 6:14 a.m.•56 views

CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

7CVSS0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/08 6:14 a.m.•19 views

CVE-2024-7206 Firmware extraction and Hardware SSL Pinning Bypass

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

7CVSS7.1AI score0.00237EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/08 6:14 a.m.•77 views

CVE-2024-7206

CVE-2024-7206 corresponds to a vulnerability in eWeLink hardware where SSL pinning can be bypassed. The connected sources indicate that a local attacker can decrypt TLS communications and extract secrets to clone the device by flashing modified firmware. The CNNVD entry specifies the vulnerabilit...

7CVSS6.5AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/08 12:00 a.m.•5 views

CVE-2024-7206: Improper Certificate Validation

SSL Pinning Bypass in eWeLink Some hardware products allows local ATTACKER to Decrypt TLS communication and Extract secrets to clone the device via Flash the modified firmware...

7CVSS5.8AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/03 6:15 p.m.•68 views

CVE-2024-41988

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications th...

9.3CVSS0.0059EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/03 5:40 p.m.•94 views

CVE-2024-41988 Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications th...

9.3CVSS0.0059EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/03 5:40 p.m.•83 views

CVE-2024-41988

CVE-2024-41988 affects TEM Opera Plus FM Family Transmitter (affected version: 35.45). An unprotected endpoint allows MPFS File System binary image upload without authentication, affecting the HTTP2 web server module and SNMP module (and shared storage access). This can be exploited to overwrite ...

9.3CVSS7.1AI score0.0059EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/03 5:40 p.m.•20 views

CVE-2024-41988 Missing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family Transmitter

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications th...

9.3CVSS7.5AI score0.0059EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/03 12:00 a.m.•17 views

PT-2024-29677 · Unknown · Tem Opera Plus Fm Family Transmitter

Name of the Vulnerable Software and Affected Versions: TEM Opera Plus FM Family Transmitter affected versions not specified Description: The TEM Opera Plus FM Family Transmitter has an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system i...

9.3CVSS7.5AI score0.0059EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/03 12:00 a.m.•5 views

CVE-2024-41988: Missing Authentication for Critical Function

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications th...

9.3CVSS6.4AI score0.0059EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/09/30 12:00 a.m.•17 views

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to a panic state if extendtree is not created. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.0024EPSS
SaveExploits0References20Affected Software3
SUSE CVE
SUSE CVE
•added 2024/09/28 2:51 a.m.•9 views

SUSE CVE-2024-46843

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove SCSI host only if added If host tries to remove ufshcd driver from a UFS device it would cause a kernel panic if ufshcdasyncscan fails during ufshcdprobehba before adding a SCSI host with scsiaddhost and M...

5.5CVSS6.3AI score0.00235EPSS
SaveExploits0References13
OSV
OSV
•added 2024/09/27 1:15 p.m.•9 views

DEBIAN-CVE-2024-46853

In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length to fix the out-of-bounds issue when writing the data that is not 4 byte aligned to TX FIFO. To reproduce the issue, write 3 bytes data to NOR chip. dd...

7.8CVSS5.9AI score0.00243EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/27 12:00 a.m.•10 views

PT-2024-39531 · Adobe · Flash

Name of the Vulnerable Software and Affected Versions: Adobe Flash affected versions not specified Description: A buffer overread issue has been identified. No further details are available due to the rejection of the candidate number. Recommendations: At the moment, there is no information about...

7.2AI score
SaveExploits0References2
OSV
OSV
•added 2024/09/23 10:23 a.m.•24 views

USN-7020-2 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - SCSI drivers; - F2FS file system; - BPF subsystem; - IPv4 networking;...

7.8CVSS6.7AI score0.00272EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/09/23 12:00 a.m.•26 views

FlashArray和FlashBlade 安全漏洞

Pure Storage FlashArray and Pure Storage FlashBlade are both products of Pure Storage, U.S.A. Pure Storage FlashArray is an all QLC flash storage array.Pure Storage FlashBlade is a consolidated storage platform for file and object Pure Storage FlashBlade is a consolidated storage platform for fil...

9.1CVSS7.3AI score0.00631EPSS
SaveExploits1References2
Rows per page
Query Builder