Lucene search
+L

2414 matches found

CNVD
CNVD
added 2018/05/23 12:00 a.m.12 views

Wireshark Null Pointer Dereference Vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed network packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A null pointer dereferenc...

7.5CVSS7.5AI score0.02821EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/22 9:29 p.m.7 views

ALPINE-CVE-2018-11359

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference...

7.5CVSS6.8AI score0.02821EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/22 9:29 p.m.7 views

DEBIAN-CVE-2018-11359

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference...

7.5CVSS6.5AI score0.02821EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/22 12:00 a.m.12 views

Radio Thermostat CT50 and CT80 Local HTTP API Unauthorized Access Vulnerability

Radio Thermostat CT50 and CT80 are both touchscreen thermostat products from Radio Thermostat USA. This product manages the heating and cooling systems in a home.Local HTTP API is one of the local HTTP interfaces. A security vulnerability exists in the Local HTTP API in Radio Thermostat CT50 and...

6.5CVSS6.6AI score0.00802EPSS
SaveExploits1References1
NVD
NVD
added 2018/05/20 1:29 p.m.19 views

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

6.5CVSS6.3AI score0.00802EPSS
SaveExploits1References3
Prion
Prion
added 2018/05/20 1:29 p.m.23 views

Information disclosure

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

3.3CVSS6.3AI score0.01956EPSS
SaveExploits2References3Affected Software2
Cvelist
Cvelist
added 2018/05/20 1:00 p.m.29 views

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

6.4AI score0.00802EPSS
SaveExploits1References3
CVE
CVE
added 2018/05/20 1:00 p.m.50 views

CVE-2018-11315

CVE-2018-11315 affects Radio Thermostat CT50/CT80 Local HTTP API (firmware 1.04.84 and earlier). The vulnerability arises from unauthorized access enabled by DNS rebinding, enabling a remote attacker to issue commands via the Local HTTP API and, as described, potentially control device temperatur...

6.5CVSS6.3AI score0.00802EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/18 12:00 a.m.16 views

The vulnerability of the Qualcomm QCRIL component in the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the Qualcomm QCRIL component in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows a remote attacker to trigger the buffer overflow...

10CVSS6AI score0.0137EPSS
SaveExploits0References3Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2018/05/15 9:32 a.m.22 views

openthread/radio-receive-done-fuzzer: Index-out-of-bounds in ot::RouterTable::UpdateAllocation

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5160541604544512 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

6.8AI score
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
added 2018/05/15 3:08 a.m.13 views

tele-radio.com XSS vulnerability

Open Bug Bounty ID: OBB-616443 Description| Value ---|--- Affected Website:| tele-radio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
added 2018/05/11 1:22 a.m.14 views

radio-frei.de XSS vulnerability

Open Bug Bounty ID: OBB-615180 Description| Value ---|--- Affected Website:| radio-frei.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
added 2018/05/08 12:00 a.m.12 views

Google Android Qualcomm Component Elevation of Privilege Vulnerability (CNVD-2018-10686)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm Radio internet packet accelerator component, which can be exploited by an attacker to elevat...

9.3CVSS7.2AI score0.00408EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/05/03 9:34 a.m.19 views

yiddishradioproject.org XSS vulnerability

Open Bug Bounty ID: OBB-611604 Description| Value ---|--- Affected Website:| yiddishradioproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OSV
OSV
added 2018/04/25 1:29 p.m.12 views

CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

8.8CVSS5.8AI score0.01069EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2018/04/22 9:49 p.m.8 views

radio-rfe.com XSS vulnerability

Open Bug Bounty ID: OBB-606746 Description| Value ---|--- Affected Website:| radio-rfe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
added 2018/04/19 12:00 a.m.15 views

Android Radio Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Radio driver is one of the radio drivers. An information disclosure vulnerability exists in the Radio driver in versions of Android prior to 2017-08-05. An attacker can exploit the...

6.5CVSS6.2AI score0.00431EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/04/19 12:00 a.m.11 views

Google Android has an unspecified vulnerability (CNVD-2018-09702)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MSM8909W is a central processing unit CPU product of Qualcomm. A security vulnerability exists in RIL in versions of Android prior to 2018-04-05. No detailed...

10CVSS6.8AI score0.01185EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2018/04/18 4:12 p.m.17 views

trinidadradiostations.net XSS vulnerability

Open Bug Bounty ID: OBB-603718 Description| Value ---|--- Affected Website:| trinidadradiostations.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Schneier on Security
Schneier on Security
added 2018/04/17 11:29 a.m.28 views

Hijacking Emergency Sirens

Turns out it's easy to hijack emergency sirens with a radio transmitter...

1.3AI score
SaveExploits0
Rows per page
Query Builder