Lucene search
+L

3816 matches found

Cvelist
Cvelist
added 2024/08/16 12:0 a.m.34 views

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

0.00559EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.4 views

PT-2024-30088 · H3C · H3C Magic B1St

Name of the Vulnerable Software and Affected Versions: H3C Magic B1ST version v100R012 Description: A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue affects the H3C Magic B1ST device, potentially allowing unauthorized access...

9.8CVSS7.4AI score0.00559EPSS
SaveExploits1References7
Patchstack
Patchstack
added 2024/08/13 6:32 a.m.6 views

WordPress Generate Images – Magic Post Thumbnail plugin < 5.2.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Kieran Burge in WordPress Plugin Magic Post Thumbnail versions 5.2.8...

4.8CVSS6.1AI score0.00399EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.4 views

WordPress plugin RegistrationMagic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS6.1AI score0.00273EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/07/17 12:0 a.m.13 views

Unspecified Vulnerability in Magic R230 of Xinhua San Technologies Ltd.

Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the Magic R230 V100R002 of Xinhua San Technologies Co. The vulnerability stems from a hard-coded password vulnerability in /etc/shadow, which can be exploited by an attacker to log in as root...

9.8CVSS6.9AI score0.00534EPSS
SaveExploits1References1
NVD
NVD
added 2024/07/16 7:15 p.m.20 views

CVE-2024-40516

An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality...

8.8CVSS0.0033EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/16 12:0 a.m.61 views

CVE-2024-40516

CVE-2024-40516 affects H3C Magic RC3000 RC3000V100R009. The vulnerability exists in the Routing functionality and enables a remote attacker to execute arbitrary code. Reported severity is CVSS 3.1 base score 8.8 (HIGH) with adjacent attack vector, no privileges, no user interaction required, and ...

8.8CVSS7.9AI score0.0033EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/07/16 12:0 a.m.23 views

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2024-1976)

According to the versions of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2GENERATEDVALUE...

4.3CVSS6.5AI score0.00346EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/16 12:0 a.m.21 views

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2024-1949)

According to the versions of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2GENERATEDVALUE...

4.3CVSS6.5AI score0.00346EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.7 views

PT-2024-28893 · H3C · H3C Magic Rc3000

Name of the Vulnerable Software and Affected Versions: H3C Magic RC3000 version RC3000V100R009 Description: The issue allows a remote attacker to execute arbitrary code via the Routing functionality. Recommendations: For version RC3000V100R009, consider disabling the Routing functionality until a...

8.8CVSS8.1AI score0.0033EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/09 12:0 a.m.11 views

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

8.8CVSS7.1AI score
SaveExploits0References3
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.10 views

outline Security breaches

outline is the US-based outline open source used to provide the fastest wiki and knowledge base for growing teams. A security vulnerability exists in outline v0.76.1 and earlier versions, which originated from a vulnerability that allows an attacker to perform a session hijacking attack via user...

8.8CVSS6.6AI score0.00739EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/07/09 12:0 a.m.17 views

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

7.1AI score0.00739EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2024/06/28 9:2 p.m.41 views

CVE-2024-29040

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

4.3CVSS5.1AI score0.00346EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/06/28 9:2 p.m.31 views

CVE-2024-29040 Fapi Verify Quote: Does not detect if quote was not generated by TPM

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

4.3CVSS6.8AI score0.00346EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/06/28 9:2 p.m.46 views

CVE-2024-29040

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

4.3CVSS5.7AI score0.00346EPSS
SaveExploits0
OSV
OSV
added 2024/06/25 12:40 p.m.6 views

MAL-2024-2245 Malicious code in down_load_epub_the_color_of_magic_1kl2my (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2024/06/24 9:15 p.m.27 views

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

9.8CVSS0.00534EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/24 9:15 p.m.13 views

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

4.1CVSS6AI score0.00413EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/24 9:15 p.m.27 views

CVE-2024-38903

H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands...

4.1CVSS0.00413EPSS
SaveExploits1References1
Rows per page
Query Builder