Lucene search
+L

1764 matches found

CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•18 views

Adtran 411 ONT 安全漏洞

The Adtran 411 ONT is an optical network terminal ONT from Adtran, Inc. It is used to provide fiber-to-the-home FTTH services and support high-speed Internet access. A security vulnerability exists in the Adtran 411 ONT version L80.00.0011.M2, which originates from a command injection in the web...

9.8CVSS7.6AI score0.02235EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•19 views

Adtran 411 ONT 安全漏洞

The Adtran 411 ONT is an optical network terminal ONT from Adtran, Inc. It is used to provide fiber-to-the-home FTTH services and support high-speed Internet access. A security vulnerability exists in the Adtran 411 ONT version L80.00.0011.M2, which originates from a command injection in the teln...

9.8CVSS7.6AI score0.02626EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/03/28 1:24 a.m.•11 views

EUVD-2025-8546

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This vulnerability is...

9.1CVSS7.5AI score0.01145EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•2 views

CVE-2025-20138: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

8.8CVSS8.1AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•10 views

below 安全漏洞

below is a resource monitor for modern Linux systems open-sourced by Meta Incubator. A security vulnerability exists in versions of below prior to v0.9.0, which stems from the creation of a globally writable directory that could lead to elevation to root privileges via a symbolic link attack...

6.8CVSS7.4AI score0.00372EPSS
SaveExploits23References4
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2020-12050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can repla...

7CVSS6.8AI score0.00308EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/03/05 12:00 a.m.•25 views

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.12 and prior versions that stems from improper authorization and allows bypassing the...

7.1CVSS6.8AI score0.00442EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2023-49100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Trusted Firmware-A TF-A before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enou...

4.4CVSS5.6AI score0.00224EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2017-7500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and...

7.8CVSS7AI score0.00412EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2020-27777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest system running ...

7.2CVSS6.2AI score0.00476EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/13 4:17 a.m.•12 views

CVE-2025-1143

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system...

8.4CVSS7AI score0.00189EPSS
SaveExploits0References4
NVD
NVD
•added 2025/02/11 4:15 a.m.•16 views

CVE-2025-1143

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system...

8.4CVSS0.00189EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/11 3:17 a.m.•99 views

CVE-2025-1143

CVE-2025-1143 affects Billion Electric routers (M100, M150, M120N). Public records describe hard-coded embedded Linux credentials in the SSH service, allowing an attacker with local access to log in and obtain root privileges. The CVSS 3.1 vector indicates local access, low attack complexity, and...

8.4CVSS8.5AI score0.00189EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/11 3:17 a.m.•26 views

CVE-2025-1143 Billion Electric M120N - Use of Hard-coded Credentials

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system...

8.4CVSS0.00189EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•3 views

CVE-2025-1143: Use of Hard-coded Credentials

Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system...

8.4CVSS5.8AI score0.00189EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•14 views

Azure Linux 3.0 Security Update: oath-toolkit (CVE-2024-47191)

The version of oath-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47191 advisory. - pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because...

7.1CVSS7.1AI score0.00339EPSS
SaveExploits0References2
Mend
Mend
•added 2025/02/07 9:21 a.m.•1 views

CVE-2025-0303

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow...

9.3CVSS0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/07 12:00 a.m.•20 views

PT-2025-5908 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.1.2 Description: The issue allows a local attacker to cause the common permission to be upgraded to root and sensitive information to leak through a buffer overflow. Recommendations: For OpenHarmony versions...

8.8CVSS7.2AI score0.00173EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/07 12:00 a.m.•3 views

CVE-2025-0303: Buffer Copy without Checking Size of Input

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow...

8.8CVSS6AI score0.00173EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/07 12:00 a.m.•12 views

OpenHarmony 资源管理错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A resource management error vulnerability exists in OpenHarmony 4.1.2 and earlier versions, which stems from improper use of freed resources and could allow a local attacker to boost to...

8.8CVSS6.1AI score0.0017EPSS
SaveExploits0References1
Rows per page
Query Builder