Lucene search
+L

25881 matches found

CNNVD
CNNVD
added 2024/03/27 12:00 a.m.10 views

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

9CVSS9.1AI score0.01849EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.12 views

PT-2024-23093 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability has been found, affecting the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument mac leads to a stack-based buffer...

9CVSS8.7AI score0.01584EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.10 views

Tenda FH1205 命令注入漏洞

The Tenda FH1205 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

8.8CVSS7AI score0.07932EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.13 views

The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda AC15 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda AC15 router software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS7AI score0.0405EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/27 12:00 a.m.26 views

Google Chrome Security Update (stable-channel-update-for-desktop_26-2024-03) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.4AI score0.17922EPSS
SaveExploits8References1
OpenVAS
OpenVAS
added 2024/03/27 12:00 a.m.20 views

Google Chrome Security Update (stable-channel-update-for-desktop_12-2024-03) - Mac OS X

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

8.8CVSS8.6AI score0.00706EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/26 9:15 p.m.7 views

CVE-2024-2903

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely...

8.8CVSS6.3AI score0.01849EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/03/26 6:31 p.m.32 views

CVE-2024-2897 Tenda AC7 WriteFacMac formWriteFacMac os command injection

A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclose...

6.5CVSS7.2AI score0.07893EPSS
SaveExploits2References4
NVD
NVD
added 2024/03/26 3:15 p.m.15 views

CVE-2024-23482

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7.8CVSS6.9AI score0.00275EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/26 3:15 p.m.8 views

CVE-2024-23482

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7.8CVSS5.8AI score0.00275EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 2:23 p.m.75 views

CVE-2024-23482

CVE-2024-23482 describes a local privilege escalation in the ZScalerService process of Zscaler Client Connector for macOS. Affected: Zscaler Mac ZApp versions prior to 4.2.0.241. Root cause: local privilege escalation in ZScalerService. Impact is high for confidentiality, integrity, and availabil...

7.8CVSS7AI score0.00275EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/26 2:23 p.m.26 views

CVE-2024-23482 ZScalerService Local Privilege Escalation

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 2:23 p.m.25 views

CVE-2024-23482 ZScalerService Local Privilege Escalation

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7CVSS7AI score0.00275EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/26 12:00 a.m.5 views

Tenda AC15 formWriteFacMac Method Command Injection Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a command injection vulnerabilit...

8.8CVSS7.8AI score0.0405EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/03/26 12:00 a.m.11 views

PT-2024-19891 · Zscaler · Zscaler +2

Name of the Vulnerable Software and Affected Versions: ZScaler versions prior to 4.2.0.241 Description: The ZScaler service is susceptible to a local privilege escalation issue found in the ZScalerService process. Recommendations: For versions prior to 4.2.0.241, update to Mac ZApp 4.2.0.241 or...

7CVSS7.3AI score0.00275EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/03/26 12:00 a.m.11 views

The vulnerability of the MAC-address filtering component of the TOTOLINK X2000R microprogrammable router allows a attacker to carry out XSS attacks.

The vulnerability of the MAC-address filtering component of the TOTOLINK X2000R microprogrammable router exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

9CVSS5.4AI score0.0048EPSS
SaveExploits1References3Affected Software1
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2024/03/26 12:00 a.m.128 views

Stable Channel Update for Desktop

The Stable channel has been updated to 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

8.8CVSS8.6AI score0.17922EPSS
SaveExploits8Affected Software1
CNNVD
CNNVD
added 2024/03/26 12:00 a.m.8 views

Tenda AC7 操作系统命令注入漏洞

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts 802.11ac standard and supports dual-band concurrent transmission with wireless rate up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from a buffer...

8.8CVSS8.1AI score0.07893EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2024/03/25 12:00 a.m.21 views

Mozilla Firefox Security Update (MFSA2024-15) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

9.8CVSS8.9AI score0.22935EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2024/03/25 12:00 a.m.19 views

Mozilla Firefox ESR Security Update (MFSA2024-16) - Mac OS X

Mozilla Firefox ESR is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.4CVSS9AI score0.047EPSS
SaveExploits0References1
Rows per page
Query Builder