Lucene search
K

2574 matches found

CNNVD
CNNVD
added 2025/06/24 12:0 a.m.2 views

5V Technologies Blue Angel Software Suite 操作系统命令注入漏洞

5V Technologies Blue Angel Software Suite is a management and control software suite deployed on embedded Linux devices from 5V Technologies, Taiwan, China. A security vulnerability exists in 5V Technologies Blue Angel Software Suite that originates from an OS command injection attack due to an...

8.8CVSS7.3AI score0.02207EPSS
Exploits1References4
Oracle linux
Oracle linux
added 2025/06/24 12:0 a.m.7 views

iputils security update

20210202-11.0.1.1 - Upstream backport 'ping: Add SARESTART to saflags' Orabug: 34573399 20210202-11.1 - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping RHEL-94335 20210202-11 - ping: Fix ping6 binding to VRF and address RHEL-57734 20210202-10 -...

6.5CVSS7.3AI score0.00508EPSS
Exploits1
OSV
OSV
added 2025/06/24 12:0 a.m.1 views

ALSA-2025:9421 Moderate: iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping CVE-2025-47268 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.5CVSS7.1AI score0.00508EPSS
Exploits1References4
OSV
OSV
added 2025/06/24 12:0 a.m.4 views

ALSA-2025:9432 Moderate: iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping CVE-2025-47268 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.5CVSS6.4AI score0.00508EPSS
Exploits1References4
OSV
OSV
added 2025/06/20 2:28 p.m.1 views

SUSE-SU-2025:20442-1 Security update for iputils

This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp bsc1243772 - Fix ping on s390x printing invalid ttl bsc1243284 - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300...

6.5CVSS6.7AI score0.00508EPSS
Exploits1References6
SUSE Linux
SUSE Linux
added 2025/06/20 2:28 p.m.1 views

Security update for iputils

This update for iputils fixes the following issues: CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp bsc1243772 Fix ping on s390x printing invalid ttl bsc1243284 CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300 Patch...

6.5CVSS7.6AI score0.00508EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/06/15 12:0 a.m.2 views

PT-2025-25500 · Ping Identity · Pingfederate Administrative Console

Name of the Vulnerable Software and Affected Versions: PingFederate Administrative Console affected versions not specified Description: The issue concerns unsanitized user-supplied data saved in the PingFederate Administrative Console, which could trigger the execution of JavaScript code in...

6.9CVSS5.8AI score0.00437EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/06/15 12:0 a.m.1 views

Ping Identity PingFederate 安全漏洞

Ping Identity PingFederate is a flagship software-based federation server from US-based Ping Identity, Inc. for identity management. Ping Identity PingFederate suffers from a security vulnerability that stems from failure to clean user-supplied data and could lead to the execution of JavaScript...

6.9CVSS6.7AI score0.00437EPSS
Exploits0References3
OSV
OSV
added 2025/06/02 11:15 a.m.2 views

CVE-2025-5442

A vulnerability, which was classified as critical, has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RPpingGatewayByBBS of the file /goform/RPpingGatewayByBBS. The manipulation of th...

9.8CVSS5.6AI score0.06389EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/31 12:47 p.m.7 views

CVE-2025-48047

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS7.6AI score0.01615EPSS
Exploits0References1
NVD
NVD
added 2025/05/29 1:15 p.m.9 views

CVE-2025-48047

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS0.01615EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/29 12:36 p.m.8 views

CVE-2025-48047 MICI Network Co. Ltd. NetFax Server Command Injection

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint...

9.4CVSS7.5AI score0.01615EPSS
Exploits0References1
CVE
CVE
added 2025/05/29 12:36 p.m.43 views

CVE-2025-48047

CVE-2025-48047: AFFECTED product is NetFax Server. An authenticated user can trigger a command injection through unsanitized input to the ping functionality exposed at /test.php. Root cause: improper sanitization of input in the ping endpoint allows execution of arbitrary commands on the server. ...

9.4CVSS7.5AI score0.01615EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/29 12:0 a.m.2 views

MICI NetFax Server 安全漏洞

MICI NetFax Server is a product suite from China's MICI Corporation MICI designed to receive fax messages to user mailboxes via e-mail traffic. A security vulnerability exists in MICI NetFax Server versions prior to 3.0.1.0, which stems from insufficient cleanup of inputs to the ping feature of...

9.4CVSS6.4AI score0.01615EPSS
Exploits0References1
CVE
CVE
added 2025/05/25 11:31 a.m.68 views

CVE-2025-5147

CVE-2025-5147 affects Netcore NBR1005GPEV2, NBR200V2, and B6V2 (up to 20250508). The vulnerability resides in the function tools_ping in the file /usr/bin/network_tools, where improper handling of the url argument allows command injection. Exploitation can be remote, and public disclosure exists....

6.5CVSS6.9AI score0.0105EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/05/25 12:0 a.m.5 views

PT-2025-22858 · Netcore · Netcore B6V2 +2

Name of the Vulnerable Software and Affected Versions: Netcore NBR1005GPEV2 versions up to 20250508 Netcore NBR200V2 versions up to 20250508 Netcore B6V2 versions up to 20250508 Description: A critical issue affects the tools ping function of the file /usr/bin/network tools. The manipulation of t...

6.5CVSS6.7AI score0.0105EPSS
Exploits0References11
Fedora
Fedora
added 2025/05/24 1:46 a.m.7 views

[SECURITY] Fedora 41 Update: iputils-20240905-4.fc41

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic...

6.5CVSS7AI score0.00508EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 9:15 a.m.2 views

CVE-2024-37642

TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a command injection vulnerability via the ipv4ping, ipv6ping parameter at /formSystemCheck...

9.1CVSS5.9AI score0.17756EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:5 a.m.6 views

CVE-2024-51186

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution RCE vulnerability via the pingaddr parameter in the pingv4 and pingv6 functions...

8CVSS8.4AI score0.01297EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:59 a.m.3 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS7.8AI score0.00122EPSS
Exploits1References1
Rows per page
Query Builder