Lucene search
+L

6987 matches found

Cvelist
Cvelist
•added 2025/04/09 8:02 p.m.•31 views

CVE-2025-30658 Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop

A Missing Release of Memory after Effective Lifetime vulnerability in the Anti-Virus processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On all SRX platforms with Anti-Virus enabled, if a server sends specific...

8.7CVSS0.00424EPSS
SaveExploits0References1
Citrix
Citrix
•added 2025/04/09 12:00 a.m.•28 views

CVAD 2203- Services are failing intermittently after restart

After a database outage, restarting Citrix processes on the controllers, as well as rebooting the entire controller, results in crash notifications in event viewer and odd behavior...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•7 views

PT-2025-16008

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A denial-of-service issue allows attackers to reboot firewalls by sending a malicious packet via the SCEP authentication feature. This enables unauthenticated attackers to repeatedly reboot...

8.7CVSS0.00315EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•26 views

PT-2025-15865 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions 21.4 prior to 21.4R3-S10 Junos OS versions 22.2 prior to 22.2R3-S6 Junos OS versions 22.4 prior to 22.4R3-S6 Junos OS versions 23.2 prior to 23.2R2-S3 Junos OS versions 23.4 prior to...

8.7CVSS6.4AI score0.00424EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from incorrectly setting IDR0.CCTW of appssmmu, which could result in a device lockup or reboot...

5.5CVSS4.7AI score0.00141EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2025/04/07 4:08 p.m.•13 views

Security update for xen

This update for xen fixes the following issues: CVE-2025-1713: Fixed potential deadlock with VT-d and legacy PCI device pass-through bsc1238043 Other fixes: Xen channels and domU console bsc1219354 Fixed attempting to start guest vm's libxl fills disk with errors bsc1237692 Xen call trace and API...

6.8CVSS7.4AI score0.00804EPSS
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2025/04/04 6:32 a.m.•16 views

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

9.2CVSS8.1AI score0.00539EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•17 views

PT-2025-22242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's smartpqi driver has been identified. The driver incorrectly checks the reset devices variable to determine if special adjustments are needed for...

7.8CVSS6.3AI score0.00187EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/04/02 1:29 p.m.•11 views

SUSE CVE-2025-21900

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a deadlock when recovering state on a sillyrenamed file If the file is sillyrenamed, and slated for delete on close, it is possible for a server reboot to triggeer an open reclaim, with can again race with the...

5.5CVSS7.6AI score0.00348EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/02 7:15 a.m.•23 views

CVE-2025-0415

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for...

9.2CVSS0.00539EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/02 6:22 a.m.•109 views

CVE-2025-0415

CVE-2025-0415 is a remote command-injection vulnerability in MOXA device web interfaces via NTP settings. The issue allows a web-admin to execute arbitrary system commands, potentially causing the device to enter an infinite reboot loop and disrupt connectivity for downstream systems. The CVSS ba...

9.2CVSS8AI score0.00539EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:28 a.m.•53 views

CVE-2024-54804

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wanhostname and forcing a reboot. This will result in command injection...

9.8CVSS7.3AI score0.0166EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•27 views

MOXA EDR-810 操作系统命令注入漏洞

MOXA EDR-810 is a secure router from China's MOXA MOXA. The MOXA EDR-810 suffers from a security vulnerability that originates from the NTP settings in the device's web interface, which could lead to the execution of arbitrary system commands and an infinite reboot loop by a remote attacker...

9.2CVSS7.1AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•32 views

PT-2025-14464 · Moxa · Edf-G1002-Bp Series +11

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result i...

9.2CVSS7.2AI score0.00539EPSS
SaveExploits0References11
OSV
OSV
•added 2025/03/31 9:15 p.m.•14 views

CVE-2024-54804

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wanhostname and forcing a reboot. This will result in command injection...

9.8CVSS5.8AI score0.0166EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/31 9:15 p.m.•45 views

CVE-2024-54803

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter pppoepeermac and forcing a reboot. This will result in command injection...

9.8CVSS0.0166EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•8 views

CVE-2024-54804: Improper Control of Generation of Code

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wanhostname and forcing a reboot. This will result in command injection...

9.8CVSS6.9AI score0.0166EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•5 views

CVE-2024-54803: Improper Control of Generation of Code

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter pppoepeermac and forcing a reboot. This will result in command injection...

9.8CVSS7.5AI score0.0166EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/31 12:00 a.m.•74 views

CVE-2024-54804

The Netgear WNR854T wireless router, specifically version 1.5.2 (North America) , is vulnerable to a Command Injection vulnerability. The root cause is the wan_hostname nvram parameter failing to properly filter special characters and commands. An attacker can exploit this by sending a specially ...

9.8CVSS7.4AI score0.0166EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/03/31 12:00 a.m.•64 views

CVE-2024-54803

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter pppoepeermac and forcing a reboot. This will result in command injection...

0.0166EPSS
SaveExploits1References1
Rows per page
Query Builder