Lucene search
+L

2416 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/09 12:00 a.m.•7 views

CVE-2023-32782: Improper Neutralization of Special Elements used in a Command

A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerabili...

7.2CVSS7.1AI score0.56159EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/09 12:00 a.m.•4 views

CVE-2023-32781: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this...

7.2CVSS7.3AI score0.14261EPSS
SaveExploits3References2
OSV
OSV
•added 2023/07/21 11:05 a.m.•15 views

OESA-2023-1437 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb-cb initialization in the ipvlan network...

7.8CVSS6.7AI score0.08289EPSS
SaveExploits5References7
Zero Day Initiative
Zero Day Initiative
•added 2023/07/19 12:00 a.m.•24 views

KeySight N6841A RF Sensor deleteFirmwarePackage Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of KeySight N6841A RF Sensor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.1AI score0.00245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/07/19 12:00 a.m.•34 views

KeySight N6841A RF Sensor smsRestoreDatabaseZip Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of KeySight N6841A RF Sensor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.2AI score0.00205EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/07/19 12:00 a.m.•29 views

KeySight N6841A RF Sensor addFirmwarePackage Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of KeySight N6841A RF Sensor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.1AI score0.00245EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/07/19 12:00 a.m.•26 views

KeySight N6841A RF Sensor removeLicenseFile Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of KeySight N6841A RF Sensor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS7.1AI score0.00245EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/07/14 12:00 a.m.•40 views

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:2820-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2820-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. Th...

7.8CVSS6.8AI score0.01056EPSS
SaveExploits5References83
BDU FSTEC
BDU FSTEC
•added 2023/07/11 12:00 a.m.•12 views

The vulnerability of the ishtp_cl_get_dma_send_buf() function in the driver of the Integrated Sensor Hub (ISH) for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the ishtpclgetdmasendbuf function in the Linux operating system’s Integrated Sensor Hub ISH driver lies in pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.3AI score0.00195EPSS
SaveExploits0References11Affected Software10
BDU FSTEC
BDU FSTEC
•added 2023/07/11 12:00 a.m.•17 views

The vulnerability of the amd_sfh_hid_client_init() function in the AMD Sensor Fusion Hub driver for Linux operating systems allows a hacker to induce a service failure.

The vulnerability of the amdsfhhidclientinit function in the AMD Sensor Fusion Hub driver for Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS6.6AI score0.00195EPSS
SaveExploits0References7Affected Software6
Microsoft CVE
Microsoft CVE
•added 2023/07/07 7:00 a.m.•9 views

A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system.

...

5.5CVSS7.2AI score0.00195EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/07/07 7:00 a.m.•18 views

A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system.

...

5.5CVSS7.1AI score0.00195EPSS
SaveExploits0
OSV
OSV
•added 2023/07/05 10:15 a.m.•18 views

CVE-2023-2880

Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS001 device...

7.5CVSS5.8AI score0.00984EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/07/05 12:00 a.m.•18 views

Frauscher Sensortechnik GmbH FDS001 路径遍历漏洞

Frauscher Sensortechnik GmbH FDS001 is a diagnostic system device from Frauscher. A path traversal vulnerability exists in Frauscher Sensortechnik GmbH FDS001 version 1.3.3 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...

7.5CVSS7.4AI score0.00984EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/29 4:15 p.m.•19 views

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

9.8CVSS7.9AI score0.01319EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2023/06/29 2:32 p.m.•55 views

Moderate: Red Hat Security Advisory: ACS 4.1 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes new features and bug fixes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

9.8CVSS6.8AI score0.04561EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2023/06/29 12:00 a.m.•33 views

Sensor-Technik Wiedemann TCG-4 安全漏洞

The Sensor-Technik Wiedemann TCG-4 STW TCG-4 is a communication interface from Sensor-Technik. A security vulnerability exists in the Sensor-Technik Wiedemann TCG-4 that originates in the DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite connections of the TCG-4...

9.8CVSS8.6AI score0.01319EPSS
SaveExploits0References3
OSV
OSV
•added 2023/06/28 10:15 p.m.•17 views

AZL-27352 CVE-2023-3357 affecting package kernel for versions less than 5.15.118.1-2

A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system...

5.5CVSS6.9AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/28 10:15 p.m.•11 views

DEBIAN-CVE-2023-3357

A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system...

5.5CVSS6.2AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/28 10:15 p.m.•8 views

DEBIAN-CVE-2023-3358

A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub ISH driver. This issue could allow a local user to crash the system...

5.5CVSS6AI score0.00195EPSS
SaveExploits0References1
Rows per page
Query Builder