Lucene search
+L

1482 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/12/11 12:0 a.m.13 views

Veritas Enterprise Vault Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is required to exploit this vulnerability. The specific flaw exists within the EVTaskGuardian service. The issue results from the lack of proper...

8CVSS7.3AI score0.00907EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/12/10 12:0 a.m.11 views

BlueZ Classic HID Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of Classic HID connections. The issue results from the lack of...

8.8CVSS7.3AI score0.02033EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/22 10:15 p.m.14 views

CVE-2024-7392

ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerabilit...

6.5CVSS0.00532EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 10:15 p.m.7 views

CVE-2024-7391

ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging devices. User interaction is required to exploit this vulnerability...

5.7CVSS5.7AI score0.00454EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:31 p.m.18 views

CVE-2024-7392 ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability

ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerabilit...

4.3CVSS6.5AI score0.00532EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/22 9:31 p.m.62 views

CVE-2024-7392

ChargePoint Home Flex devices are affected by a BLE Denial-of-Service vulnerability. The root cause is improper handling of Bluetooth Low Energy connections, specifically a limit on the number of active connections that can be maintained, which an attacker can exploit from adjacent networks to cr...

6.5CVSS4.3AI score0.00532EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/22 9:31 p.m.34 views

CVE-2024-7392 ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability

ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not required to exploit this vulnerabilit...

4.3CVSS0.00532EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/22 9:31 p.m.33 views

CVE-2024-7391 ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability

ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging devices. User interaction is required to exploit this vulnerability...

2.6CVSS0.00454EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:31 p.m.42 views

CVE-2024-7391 ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability

ChargePoint Home Flex Bluetooth Low Energy Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging devices. User interaction is required to exploit this vulnerability...

2.6CVSS6.1AI score0.00454EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/22 9:15 p.m.16 views

CVE-2024-8805

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

8.8CVSS0.02033EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/22 9:2 p.m.26 views

CVE-2024-8805 BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

8.8CVSS0.02033EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 8:15 p.m.5 views

CVE-2024-6246

Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

8.8CVSS7.7AI score0.00968EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/22 8:15 p.m.17 views

CVE-2024-6249

Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

8.8CVSS0.01244EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/22 8:15 p.m.26 views

CVE-2024-6246

Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

9.6CVSS0.00968EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/22 8:15 p.m.7 views

CVE-2023-51635

NETGEAR RAX30 fingdil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS6.4AI score0.01291EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/22 8:5 p.m.28 views

CVE-2024-6248 Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability

Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

7.5CVSS0.01186EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/22 8:5 p.m.63 views

CVE-2024-6246

CVE-2024-6246 affects Wyze Cam v3 via the Realtek Wi‑Fi kernel module. It is a heap-based buffer overflow caused by inadequate validation of user-supplied data length, allowing network-adjacent attackers to execute code in the kernel context without authentication. The vulnerability is documented...

9.6CVSS9.6AI score0.00968EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.17 views

CVE-2024-6246 Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability

Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

9.6CVSS8AI score0.00968EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.20 views

CVE-2024-5722 Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability

Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this...

8.8CVSS7.8AI score0.01072EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/22 8:5 p.m.32 views

CVE-2024-5722 Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability

Logsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this...

8.8CVSS0.01072EPSS
SaveExploits0References2
Rows per page
Query Builder