Lucene search
+L

6662 matches found

CNNVD
CNNVD
added 2024/04/09 12:00 a.m.6 views

Microsoft Windows Internet Connection Sharing 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Internet Connection Sharing ICS. An attacker exploiting this vulnerability could remotely execute code. The following products and...

6.8CVSS8.6AI score0.0073EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/04/08 12:00 a.m.20 views

The vulnerability of the CGI script nas_sharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L NAS devices allows a hacker to execute arbitrary code.

The vulnerability of the CGI script nassharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L devices lies in the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code ...

10CVSS7.9AI score0.99997EPSS
SaveExploits8References4
NVD
NVD
added 2024/04/07 9:15 a.m.23 views

CVE-2024-30417

Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS6.6AI score0.00428EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/07 9:15 a.m.9 views

CVE-2024-30417

Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.00428EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/07 8:16 a.m.34 views

CVE-2024-30417

Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.8AI score0.00428EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/07 8:16 a.m.12 views

CVE-2024-30417

Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.9AI score0.00428EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/07 8:16 a.m.72 views

CVE-2024-30417

Huawei HarmonyOS and EMUI are affected by a path traversal vulnerability in the Bluetooth-based sharing module. The issue can allow an attacker to view arbitrary files on the system and has been described with high impact to confidentiality (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Public ...

7.5CVSS6.8AI score0.00428EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2024/04/07 12:00 a.m.9 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A directory traversal vulnerability exists in Huawei...

7.5CVSS7AI score0.00428EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/07 12:00 a.m.12 views

PT-2024-23343 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a path traversal vulnerability in the Bluetooth-based sharing module. Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS6.8AI score0.00428EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
added 2024/04/04 11:07 a.m.26 views

Surveillance by the New Microsoft Outlook App

The ProtonMail people are accusing Microsofts new Outlook for Windows app of conducting extensive surveillance on its users. It shares data with advertisers, a lot of data: The window informs users that Microsoft and those 801 third parties use their data for a number of purposes, including to:...

7AI score
SaveExploits0
OSV
OSV
added 2024/04/04 1:15 a.m.9 views

CVE-2024-3272

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The...

9.8CVSS5.4AI score0.98038EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.9 views

编号撤回

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...

6.5AI score
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.9 views

编号撤回

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...

4.8CVSS6.5AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.8 views

编号撤回

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...

6.5AI score
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.8 views

Esri Portal For ArcGIS 安全漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGIS that stems from the presence...

4.7CVSS5.9AI score0.00469EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.25 views

D-Link DNS-320 命令注入漏洞

D-Link DNS-320 is a NAS Network Attached Storage device from China's AUO D-Link. A command injection vulnerability exists in the D-Link DNS-320L, which originates from a command injection vulnerability in the file /cgi-bin/nassharing.cgi. Affected products and versions: D-Link DNS-320L, DNS-325,...

9.8CVSS7.9AI score0.99997EPSS
SaveExploits8References6
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.11 views

编号撤回

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...

6.1CVSS6.5AI score0.00425EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.8 views

编号撤回

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. This CVE number has been withdrawn...

6.1CVSS6.5AI score0.00449EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.22 views

D-Link DNS-320 信任管理问题漏洞

The D-Link DNS-320 is a NAS Network Attached Storage device from China's Terasic D-Link Corporation. A trust management issue vulnerability exists in the D-Link DNS-320L, which originates from a trust management issue vulnerability in the file /cgi-bin/nassharing.cgi. Affected products and...

10CVSS9.4AI score0.98038EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2024/04/04 12:00 a.m.10 views

Esri Portal For ArcGIS 安全漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGIS that stems from the presence of a cross-site scripting vulnerability...

4.8CVSS5.9AI score0.00373EPSS
SaveExploits0References4
Rows per page
Query Builder