Lucene search
+L

3319 matches found

Cvelist
Cvelist
added 2023/12/04 11:02 p.m.33 views

CVE-2023-40465 Improper input leads to DoS

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal...

8.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/04 12:00 a.m.17 views

PT-2023-24180 · Qualcomm · 315 5G Iot Modem Firmware +205

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs when processing a NULL buffer while parsing WLAN vdev. No information is provided...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2023/11/28 10:42 p.m.50 views

avahi security update

An update is available for avahi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Avahi is an implementation of the DNS Service Discovery and Multicast DNS...

5.5CVSS6.8AI score0.00386EPSS
SaveExploits1
OSV
OSV
added 2023/11/28 10:42 p.m.36 views

RLSA-2023:7190 Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.5CVSS5.9AI score0.00386EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/28 9:15 p.m.27 views

CVE-2023-29062

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes...

3.8CVSS0.00297EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/28 9:15 p.m.11 views

CVE-2023-29062

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes...

3.8CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/28 9:15 p.m.23 views

Design/Logic Flaw

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes...

2.9CVSS7AI score0.00297EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/28 8:34 p.m.36 views

CVE-2023-29062 Unsecure Identity Verification

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes...

3.8CVSS4.6AI score0.00297EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/28 8:34 p.m.53 views

CVE-2023-29062

CVE-2023-29062 describes a vulnerability in the OS hosting BD FACSChorus where user credentials may be transmitted as NTLMv2 hashes via LLMNR, MBT-NS, or MDNS, if the identity of requested resources is not adequately validated. Affected products are BD FACSChorus software and workstations (versio...

3.8CVSS4.4AI score0.00297EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/28 12:00 a.m.12 views

PT-2023-22119 · Unknown · Operating System

Name of the Vulnerable Software and Affected Versions: Operating System affected versions not specified Description: The issue arises when the Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials without properly validating the identit...

3.8CVSS4.1AI score0.00297EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/24 12:00 a.m.9 views

The vulnerability of the sub_6FC74 function in ASUS RT-AX57 Wi-Fi router’s microprogramming system allows a intruder to execute arbitrary code.

The vulnerability of the sub6FC74 function in ASUS RT-AX57 Wi-Fi routers exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted request to the lanipaddr field...

10CVSS6AI score
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/11/14 10:15 p.m.28 views

CVE-2023-39537

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

7.8CVSS0.00206EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/14 10:15 p.m.16 views

CVE-2023-39536

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

7.8CVSS0.00206EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/14 10:15 p.m.26 views

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

4.3CVSS6.9AI score0.00206EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/14 10:15 p.m.22 views

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

4.3CVSS6.9AI score0.00206EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/14 9:24 p.m.52 views

CVE-2023-39537

AMI AptioV BIOS contains a vulnerability where improper input validation over a local network can lead to loss of confidentiality, integrity, and availability. Affected: AMI AptioV BIOS firmware (TCG2 context). Root cause: improper input validation in BIOS as described in CVE-2023-39537. Impact: ...

7.8CVSS7.4AI score0.00206EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 9:24 p.m.37 views

CVE-2023-39537 Improper input validation in BIOS TCG2

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

7.5CVSS7.7AI score0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 9:24 p.m.13 views

CVE-2023-39536 Improper input validation in BIOS OFBD

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

7.5CVSS6.7AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/14 9:24 p.m.33 views

CVE-2023-39536 Improper input validation in BIOS OFBD

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

7.5CVSS7.7AI score0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 9:23 p.m.19 views

CVE-2023-39535 Improper input validation in BIOS

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

7.5CVSS6.7AI score0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder