Lucene search
+L

149 matches found

Github Security Blog
Github Security Blog
added 2023/09/21 5:15 p.m.47 views

systeminformation SSID Command Injection Vulnerability

Impact SSID Command Injection Vulnerability Patches Problem was fixed with a parameter check. Please upgrade to version = 5.21.7, Version 4 was not affected Workarounds If you cannot upgrade, be sure to check or sanitize parameter strings that are passed to wifiConnections, wifiNetworks string on...

9.8CVSS7.3AI score0.01837EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2023/09/21 5:11 p.m.49 views

CVE-2023-42810 systeminformation SSID Command Injection Vulnerability

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9.9AI score0.01837EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/21 5:11 p.m.44 views

CVE-2023-42810 systeminformation SSID Command Injection Vulnerability

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/09/21 5:11 p.m.15 views

CVE-2023-42810 systeminformation SSID Command Injection Vulnerability

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to wifiConnections,...

9.8CVSS9.7AI score0.01837EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/21 12:0 a.m.6 views

PT-2023-28597 · Npm · Systeminformation

Name of the Vulnerable Software and Affected Versions: systeminformation versions 5.0.0 through 5.21.6 Description: The systeminformation library for Node.JS has a SSID Command Injection Vulnerability. This issue affects versions 5.0.0 through 5.21.6. The problem was fixed with a parameter check ...

9.8CVSS9.6AI score0.01837EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
added 2023/08/29 12:0 a.m.9 views

The vulnerabilities of the functions DH_check(), DH_check_ex(), and EVP_PKEY_param_check() in the OpenSSL library allow a attacker to cause a service failure.

The vulnerabilities of the functions DHcheck, DHcheckex, and EVPPKEYparamcheck in the OpenSSL library are related to excessive iteration. Exploiting these vulnerabilities can allow a remote attacker to cause service failures...

5.3CVSS6.6AI score0.03047EPSS
SaveExploits0References28Affected Software22
OSV
OSV
added 2023/07/31 4:15 p.m.20 views

AZL-35247 CVE-2023-3817 affecting package rust for versions less than 1.68.2-5

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

5.3CVSS6.5AI score0.03047EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/31 4:15 p.m.6 views

ALPINE-CVE-2023-3817

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck, DHcheckex or EVPPKEYparamcheck to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been...

5.3CVSS7.1AI score0.03047EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/12 12:0 a.m.10 views

UNISOC Chipsets 安全漏洞

UNISOC Chipsets are chipsets from China's Purple Spreadtrum UNISOC. A security vulnerability exists in some UNISOC products, which stems from a missing parameter check in the FM service. The following products are affected:...

4.4CVSS5.1AI score0.00112EPSS
SaveExploits0References2
NVD
NVD
added 2023/07/05 1:15 p.m.30 views

CVE-2021-46893

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity...

7.5CVSS7.5AI score0.00345EPSS
SaveExploits0References2
Prion
Prion
added 2023/07/05 1:15 p.m.21 views

Design/Logic Flaw

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity...

5CVSS7.5AI score0.00345EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2023/07/05 12:17 p.m.48 views

CVE-2021-46893

CVE-2021-46893 is described as a vulnerability caused by unstrict data verification and parameter checks, with potential integrity impact. The primary entry lists a NETWORK attack vector, LOW exploit complexity, and NONE privileges required (CVSS 3.1 base score 7.5). Connected documents add concr...

7.5CVSS7.5AI score0.00345EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2023/07/05 12:17 p.m.29 views

CVE-2021-46893

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity...

7.7AI score0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/05 12:17 p.m.11 views

CVE-2021-46893

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity...

6.9AI score0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/09 2:15 a.m.9 views

CVE-2022-48232

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...

5.5CVSS5.8AI score0.00088EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.12 views

PT-2023-15627 · Unknown · Fm Service

Name of the Vulnerable Software and Affected Versions: FM service affected versions not specified Description: The issue is related to a possible missing parameters check in the FM service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abou...

5.5CVSS5.2AI score0.00088EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/10 9:15 p.m.34 views

CVE-2022-47454

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

5.5CVSS5.3AI score0.00088EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/10 9:15 p.m.7 views

CVE-2022-47456

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

5.5CVSS5.8AI score0.00088EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/10 9:15 p.m.10 views

CVE-2022-47458

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

5.5CVSS5.8AI score0.00088EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/10 9:15 p.m.21 views

Code injection

In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service...

1.7CVSS5.3AI score0.00088EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder