Lucene search
+L

2743 matches found

NVD
NVD
added 2022/07/19 6:15 p.m.30 views

CVE-2022-27373

Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution RCE vulnerability via the Ping function...

8.8CVSS0.03508EPSS
SaveExploits1References1
Prion
Prion
added 2022/07/19 6:15 p.m.24 views

Command injection

Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution RCE vulnerability via the Ping function...

6.5CVSS8.9AI score0.03508EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/07/19 5:39 p.m.40 views

CVE-2022-27373

Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution RCE vulnerability via the Ping function...

9.1AI score0.03508EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/07/19 12:0 a.m.11 views

phicomm Feixun fir302b A2 操作系统命令注入漏洞

The PHICOMM Feixun fir302b A2 is a router from China's Feixun PHICOMM. The Feixun fir302b A2 suffers from an operating system command injection vulnerability that stems from the discovery of a Remote Command Execution RCE vulnerability via the Ping function...

8.8CVSS8.1AI score0.03508EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/07/19 12:0 a.m.12 views

PT-2022-18401 · Shanghai Feixun Data Communication Technology Co. · Fir302B

Name of the Vulnerable Software and Affected Versions: Shanghai Feixun Data Communication Technology Co., Ltd router fir302b version A2 Description: The issue is related to a remote command execution vulnerability via the Ping function. This allows for potential unauthorized access and control...

8.8CVSS8.6AI score0.03508EPSS
SaveExploits1References3
Fedora
Fedora
added 2022/07/17 1:15 a.m.33 views

[SECURITY] Fedora 35 Update: golang-github-j-keck-arping-1.0.1-4.fc35

Arping is a native Go library to ping a host per arp datagram, or query a host mac address...

9.3CVSS9.1AI score0.0995EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.13 views

Fedora: Security Advisory for golang-github-j-keck-arping (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OSV
OSV
added 2022/07/04 6:18 p.m.10 views

CLSA-2022-1656958687 Fixed CVE-2022-31813 in httpd-39.module_el8.4.0+2066+54659116.1.tuxcare.els8

ELS-190: Fix undefined reference to PROXYSHOULDPING100CONTINUE in approxycreatehdrbrgd that occured in httpd-2.4.37-CVE-2022-31813.patch...

9.8CVSS7.3AI score0.03349EPSS
SaveExploits1References1
Fedora
Fedora
added 2022/07/04 1:35 a.m.24 views

[SECURITY] Fedora 36 Update: golang-github-j-keck-arping-1.0.2-3.fc36

Arping is a native Go library to ping a host per arp datagram, or query a host mac address...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4
NVD
NVD
added 2022/06/30 8:15 p.m.27 views

CVE-2022-23718

PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code that would be executed as SYSTEM by the...

9.3CVSS0.01939EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/30 8:15 p.m.7 views

CVE-2022-23718

PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code that would be executed as SYSTEM by the...

9.3CVSS7.5AI score0.01939EPSS
SaveExploits0References3
Prion
Prion
added 2022/06/30 8:15 p.m.16 views

Remote code execution

PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code that would be executed as SYSTEM by the...

9.3CVSS8.2AI score0.01939EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.12 views

Ping Identity Windows PingId 授权问题漏洞

Ping Identity Windows PingId is a software from Ping Identity USA that provides security for applications. A security vulnerability exists in Ping Identity Windows PingId versions prior to 2.8 that stems from an inability to properly set the permissions of a Windows registry entry used to store...

7.7CVSS5.8AI score0.00214EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.10 views

Ping Identity Windows PingId 访问控制错误漏洞

Ping Identity Windows PingId is a software from Ping Identity, Inc. that provides security for applications. An access control error vulnerability exists in Ping Identity Windows PingId versions prior to 2.8, which stems from a failure to validly validate local Java service communication used to...

7.2CVSS6.5AI score0.00284EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.15 views

Ping Identity Windows PingId 安全漏洞

Ping Identity Windows PingId is a software from Ping Identity USA that provides security for applications. A security vulnerability exists in Ping Identity Windows PingId versions prior to 2.8 that stems from the possibility that an IT administrator could incorrectly deploy administrator-privileg...

8.2CVSS7.7AI score0.00242EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.9 views

Ping Identity Windows PingId 安全漏洞

Ping Identity Windows PingId is a software from Ping Identity USA that provides security for applications. A security vulnerability exists in Ping Identity Windows PingId versions prior to 2.8 that stems from the use of known vulnerable components that could lead to remote code execution...

9.3CVSS8.1AI score0.01939EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/06/28 12:0 a.m.96 views

Wire Cross-Site Scripting Vulnerability (CNVD-2022-65920)

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire has a cross-site scripting vulnerability that stems from insufficient...

4.3CVSS2.5AI score0.00796EPSS
SaveExploits0
Snyk
Snyk
added 2022/06/23 9:25 a.m.6 views

Malicious Package

Overview @techops-ui/ping-authentication is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

9.8CVSS7AI score
SaveExploits0References3
OSV
OSV
added 2022/06/20 8:15 p.m.11 views

MAL-2022-5335 Malicious code in ping-on-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3207a9a6ac9717095c2d6763f67b2f2c915a109c1c32ebb48e28a68753aa11d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:15 p.m.6 views

Malicious code in ping-on-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3207a9a6ac9717095c2d6763f67b2f2c915a109c1c32ebb48e28a68753aa11d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder