Lucene search
K

27 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/15 3:4 a.m.2 views

CVE-2026-0481

Unrestricted IP address binding in the AMD Device Metrics Exporter ROCm ecosystem could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability...

9.2CVSS5.8AI score0.00194EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/15 3:4 a.m.2 views

CVE-2026-0481

Unrestricted IP address binding in the AMD Device Metrics Exporter ROCm ecosystem could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability...

9.2CVSS5.8AI score0.00194EPSS
Exploits0References1
Amd
Amd
added 2026/05/12 12:0 a.m.5 views

AMD Device Metrics Exporter (ROCm ecosystem) Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0481| Unrestricted IP address binding in the AMD Device Metrics Exporter ROCm ecosystem could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially...

9.2CVSS5.8AI score0.00194EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.5 views

Tenda F456 缓冲区错误漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer error vulnerability. This vulnerability stems from the operation of the parameter “page” in the goform/SetIpBind function within the httpd component, which may lead to a...

9CVSS7.7AI score0.00092EPSS
Exploits1References1
Snyk
Snyk
added 2026/02/17 5:9 p.m.2 views

Binding to an Unrestricted IP Address

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address via ensureChromeExtensionRelayServer. An attacker can access relay HTTP endpoints from off-host locations by passing a wildcard cdpUrl, potentially...

9.1CVSS5.7AI score0.00205EPSS
Exploits0References2
OSV
OSV
added 2025/12/22 10:16 p.m.0 views

CVE-2023-53968

Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts...

9.3CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/12/22 10:16 p.m.1 views

CVE-2023-53968

Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts...

9.8CVSS0.00365EPSS
Exploits2References5
CVE
CVE
added 2025/12/22 9:35 p.m.9 views

CVE-2023-53968

Affected product: Screen SFT DAB 600/C firmware 1.9.3. Vulnerability: session management flaw that binds sessions to IP addresses, enabling authentication bypass. An attacker can reuse the same IP to issue unauthorized requests to the userManager API and remove user accounts without proper authen...

9.8CVSS6.6AI score0.00365EPSS
Exploits2References5Affected Software1
CVE
CVE
added 2025/12/16 3:11 p.m.6 views

CVE-2025-62329

HCL DevOps Deploy / HCL Launch are affected by a race condition in the HTTP session client-IP binding enforcement, which may allow a session to be briefly reused from a new IP address before invalidation. This could lead to unauthorized access under certain network conditions. Affected products a...

5.6CVSS6.2AI score0.00048EPSS
Exploits0References1Affected Software2
OSV
OSV
added 2025/12/15 8:15 p.m.1 views

CVE-2025-36360

IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefl...

5CVSS5.7AI score
Exploits0References1
NVD
NVD
added 2025/12/15 8:15 p.m.1 views

CVE-2025-36360

IBM UCD - IBM UrbanCode Deploy 7.1 through 7.1.2.27, 7.2 through 7.2.3.20, and 7.3 through 7.3.2.15 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.10, and 8.1 through 8.1.2.3 is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefl...

5CVSS0.00031EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.1 views

IBM UrbanCode Deploy(IBM UCD)和IBM DevOps Deploy 代码问题漏洞

IBM UrbanCode Deploy IBM UCD and IBM DevOps Deploy are both products of International Business Machines IBM.IBM UrbanCode Deploy is a suite of application automation deployment tools. The tool is based on an application deployment automation management information model, and through remote agent...

5CVSS6.6AI score0.00031EPSS
Exploits0References2
Snyk
Snyk
added 2025/11/13 6:31 p.m.2 views

Binding to an Unrestricted IP Address

Overview Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address due to the insecure default binding of the Java Debug Wire Protocol JDWP port to all network interfaces when debug mode is enabled. An attacker can gain unauthorized access to the Java virtual machi...

7.6CVSS7.8AI score0.00012EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/24 10:38 p.m.5 views

CVE-2025-61934

A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the...

10CVSS7.2AI score0.00368EPSS
Exploits0References1
CVE
CVE
added 2025/10/23 10:1 p.m.22 views

CVE-2025-61934

CVE-2025-61934 affects AutomationDirect Productivity Suite, version v4.4.1.19 . A vulnerability described as a binding to an unrestricted IP address allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and fold...

10CVSS6.9AI score0.00368EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-19114

Malware in sbrugna...

5.9CVSS6AI score0.00389EPSS
Exploits1References2
NVD
NVD
added 2025/09/24 7:15 p.m.1 views

CVE-2025-55322

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network...

7.3CVSS0.00173EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:31 a.m.4 views

CVE-2024-49384

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

4.3CVSS6.9AI score0.00158EPSS
Exploits0References1
CVE
CVE
added 2024/10/15 10:32 a.m.46 views

CVE-2024-49382

The CVE-2024-49382 issue affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690. The archive-server service binds to an unrestricted IP address, creating an excessive attack surface due to exposure. A confirmed remediation is to update to build 38690 or later; PT Security also ...

4.3CVSS7.1AI score0.00158EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/15 10:32 a.m.15 views

CVE-2024-49382

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...

3.5CVSS6.9AI score0.00158EPSS
Exploits0References1
Rows per page
Query Builder