Lucene search
+L

4590 matches found

Vulnrichment
Vulnrichment
•added 2023/11/14 10:57 p.m.•8 views

CVE-2023-45624

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

7.5CVSS7.5AI score0.0087EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/14 10:57 p.m.•86 views

CVE-2023-45624

CVE-2023-45624 is an unauthenticated Denial-of-Service affecting the soft ap daemon accessible via the PAPI protocol. The Red Hat cve entry confirms the DoS effect: exploitation interrupts normal operation of the affected access point. No concrete vulnerability details (vendor, product version, a...

7.5CVSS7.3AI score0.0087EPSS
SaveExploits0References1Affected Software2
RedHat Linux
RedHat Linux
•added 2023/11/14 3:46 p.m.•12 views

kernel: dm crypt: add cond_resched() to dmcrypt_write()

In the Linux kernel, the following vulnerability has been resolved: dm crypt: add condresched to dmcryptwrite The loop in dmcryptwrite may be running for unbounded amount of time, thus we need condresched in it. This commit fixes the following warning: 3391.153255 C12 watchdog: BUG: soft lockup -...

5.5CVSS6.1AI score0.00218EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/14 3:46 p.m.•18 views

kernel: md: fix soft lockup in status_resync

A logic flaw was found in the Linux kernel Multiple Device software RAID status reporting, where concurrent updates to resynchronization progress can overflow an internal difference calculation. This can cause the progress bar routine to loop excessively and trigger a soft lockup. A local user...

5.5CVSS5.9AI score0.00152EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•20 views

Aruba Networks ArubaOS and InstantOS Security Vulnerabilities

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. A security vulnerability exists in Aruba Networks ArubaOS and InstantOS due to an unauthenticated denial of service DoS vulnerability in the...

7.5CVSS6.7AI score0.0087EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•4 views

CVE-2023-45624: Undefined Security Weakness

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

7.5CVSS7.2AI score0.0087EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•10 views

PT-2023-29604 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: An unauthenticated Denial-of-Service DoS issue exists in the soft ap daemon, which is accessed via the PAPI protocol. This allows for the interruption of normal operation of the...

7.5CVSS7.4AI score0.0087EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/07 11:15 p.m.•39 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS0.00608EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/07 11:15 p.m.•19 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS5.8AI score0.00608EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/07 11:15 p.m.•11 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS5.9AI score0.00608EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/07 11:15 p.m.•30 views

Information disclosure

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

5CVSS6.9AI score0.00608EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•18 views

kernel: netfilter: ipset: Rework long task execution when adding/deleting entries

An uncontrolled resource consumption flaw was found in the Linux kernel's netfilter ipset subsystem when processing large batch operations. A local user with CAPNETADMIN capability can trigger this issue by adding or deleting a large number of ipset entries in a single operation, causing the kern...

5.5CVSS5.9AI score0.00125EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•17 views

kernel: md: fix soft lockup in status_resync

A logic flaw was found in the Linux kernel Multiple Device software RAID status reporting, where concurrent updates to resynchronization progress can overflow an internal difference calculation. This can cause the progress bar routine to loop excessively and trigger a soft lockup. A local user...

5.5CVSS5.9AI score0.00152EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•16 views

kernel: dm crypt: add cond_resched() to dmcrypt_write()

In the Linux kernel, the following vulnerability has been resolved: dm crypt: add condresched to dmcryptwrite The loop in dmcryptwrite may be running for unbounded amount of time, thus we need condresched in it. This commit fixes the following warning: 3391.153255 C12 watchdog: BUG: soft lockup -...

5.5CVSS6.1AI score0.00218EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/11/07 9:03 a.m.•25 views

kernel: RDMA/rxe: Fix "kernel NULL pointer dereference" error

A NULL pointer dereference vulnerability was found in the RXE Soft-RoCE RDMA driver in the Linux kernel. When rxequeueinit fails during queue pair initialization in rxeqpinitreq, the task function and argument pointers qp-req.task.func and qp-req.task.arg remain uninitialized. The cleanup functio...

7.5CVSS5.8AI score0.00954EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/11/07 12:00 a.m.•43 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.6AI score0.00608EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/11/07 12:00 a.m.•14 views

CVE-2023-43984

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

6.7AI score0.00608EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/07 12:00 a.m.•80 views

CVE-2023-43984

CVE-2023-43984 affects the PrestaShop Smart Soft Advanced Export module. Before v4.4.7, insecure permissions allow unauthenticated attackers to download user data from the ps_customer table due to improper access controls in the advancedexport component. Impact is user information disclosure; CVS...

7.5CVSS7.4AI score0.00608EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•11 views

CVE-2023-43984: Incorrect Default Permissions

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the pscustomer table...

7.5CVSS7.2AI score0.00608EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/06 9:15 a.m.•39 views

CVE-2023-45069

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery – Best WordPress YouTube Gallery Plugin: from n/a through 2.1...

9.8CVSS9.8AI score0.00675EPSS
SaveExploits0References1
Rows per page
Query Builder