Lucene search
+L

23866 matches found

OSV
OSV
added 2024/09/13 6:01 a.m.15 views

RHSA-2010:0834 Red Hat Security Advisory: flash-plugin security update

Bulletin has no description...

9.3CVSS7.5AI score0.69679EPSS
SaveExploits17References51
OSV
OSV
added 2024/09/13 6:01 a.m.13 views

RHSA-2010:0829 Red Hat Security Advisory: flash-plugin security update

Bulletin has no description...

9.3CVSS7.5AI score0.69679EPSS
SaveExploits17References51
OSV
OSV
added 2024/09/13 6:01 a.m.13 views

RHSA-2010:0706 Red Hat Security Advisory: flash-plugin security update

Bulletin has no description...

9.3CVSS7.3AI score0.15621EPSS
SaveExploits1References8
Microsoft CVE
Microsoft CVE
added 2024/09/11 7:00 a.m.12 views

f2fs: fix to truncate preallocated blocks in f2fs_file_open()

...

5.5CVSS6.8AI score0.00237EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/09/11 7:00 a.m.7 views

scsi: ufs: core: Fix ufshcd_clear_cmd racing issue

...

5.5CVSS6.2AI score0.00288EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/09/11 7:00 a.m.8 views

scsi: ufs: core: Fix ufshcd_abort_one racing issue

...

5.5CVSS6.2AI score0.00291EPSS
SaveExploits0
Patchstack
Patchstack
added 2024/09/11 12:53 a.m.12 views

WordPress HTML5 Video Player plugin <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by Lucio Sá in WordPress Plugin Flash & HTML5 Video versions = 2.5.34...

4.3CVSS7AI score0.00309EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/11 12:00 a.m.17 views

WordPress Flash & HTML5 Video Plugin <= 2.5.34 is vulnerable to Broken Access Control

Software Flash & HTML5 Video Type Plugin Vulnerable versions = 2.5.34 Fixed in 2.5.35 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7721 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 692106c3e036 Credits Lucio Sá Required...

4.3CVSS6.6AI score0.00309EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/09/10 4:15 p.m.30 views

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

8CVSS0.00618EPSS
SaveExploits1References1
OSV
OSV
added 2024/09/10 4:15 p.m.12 views

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

4.6CVSS5.8AI score0.00618EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/09/10 12:00 a.m.37 views

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

0.00618EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/09/10 12:00 a.m.11 views

Skyworth Router CM5100 安全漏洞

The Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Hathway Skyworth Router CM5100 version 4.1.1.24, which originates from a vulnerability that allows a physically proximate attacker to obtain user credentials via SPI flas...

8CVSS6.7AI score0.00618EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/09/10 12:00 a.m.15 views

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

6.7AI score0.00618EPSS
SaveExploits1References1
CVE
CVE
added 2024/09/10 12:00 a.m.50 views

CVE-2024-44815

CVE-2024-44815 affects Hathway Skyworth Router CM5100 v4.1.1.24. The issue allows a physically proximate attacker to obtain user credentials through the SPI flash memory (W25Q64JV). According to the sources, the vulnerability exposes credentials via firmware storage exposed on the SPI flash, with...

8CVSS7.6AI score0.00618EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/09 12:00 a.m.9 views

PT-2024-31263 · Hathway +1 · Hathway Skyworth Router Cm5100 +1

Name of the Vulnerable Software and Affected Versions: Hathway Skyworth Router CM5100 version 4.1.1.24 Description: The issue allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV. This can lead to the exposure of sensitive information. Recommendations:...

8CVSS6.5AI score0.00618EPSS
SaveExploits1References8
OSV
OSV
added 2024/09/06 11:07 a.m.15 views

OESA-2024-2109 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: f2fs: let's avoid panic if extenttree is not created This patch avoids the below panic. pc : lookupextenttree+0xd8/0x760 lr : f2fsdowritedatapage+0x104/0x87c sp ...

7.8CVSS6.5AI score0.00885EPSS
SaveExploits0References16
OSV
OSV
added 2024/09/05 11:15 p.m.9 views

CVE-2024-39278

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/05 11:15 p.m.35 views

CVE-2024-39278

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.6CVSS0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/05 10:39 p.m.63 views

CVE-2024-39278

CVE-2024-39278 affects Hughes WL3000 Fusion Software (versions prior to 2.7.0.10). The issue arises from credentials used to access device configuration information being stored unencrypted in flash memory, allowing read-only access to network and terminal configuration data. According to connect...

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/05 10:39 p.m.19 views

CVE-2024-39278 Hughes Network Systems Insufficiently Protected Credentials

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

4.2CVSS6.5AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder