Lucene search
+L

2134 matches found

NVD
NVD
•added 2024/08/13 5:15 p.m.•32 views

CVE-2023-31304

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function PF to modify the PCIe® lane count and speed, potentially leading to a loss of availability...

2.3CVSS0.00151EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/13 4:53 p.m.•45 views

CVE-2023-31304

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function PF to modify the PCIe® lane count and speed, potentially leading to a loss of availability...

2.3CVSS0.00151EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/13 4:53 p.m.•60 views

CVE-2023-31304

CVE-2023-31304 describes an issue in AMD’s SMU where improper input validation could allow a user with privileges and a compromised PCIe physical function to modify PCIe lane count and speed, potentially causing availability loss. Public sources confirm: affected component is the System Managemen...

2.3CVSS6.8AI score0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/13 4:53 p.m.•25 views

CVE-2023-31304

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function PF to modify the PCIe® lane count and speed, potentially leading to a loss of availability...

2.3CVSS6.6AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/13 12:00 a.m.•17 views

PT-2024-12268 · Smu · Smu

Name of the Vulnerable Software and Affected Versions: SMU affected versions not specified Description: The issue is related to improper input validation in SMU, which may allow an attacker with privileges and a compromised physical function PF to modify the PCIe lane count and speed. This could...

2.3CVSS6.5AI score0.00151EPSS
SaveExploits0References7
OSV
OSV
•added 2024/08/12 9:15 p.m.•11 views

DEBIAN-CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS4.9AI score0.00398EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/08/12 9:15 p.m.•25 views

CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS5.8AI score0.00398EPSS
SaveExploits0References4
OSV
OSV
•added 2024/08/12 9:15 p.m.•31 views

UBUNTU-CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS5.7AI score0.00398EPSS
SaveExploits0References5
Mend
Mend
•added 2024/08/12 8:49 p.m.•2 views

CVE-2024-43359

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS0.00398EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/08/12 8:49 p.m.•13 views

CVE-2024-43359 XSS vulnerabilities in montagereview

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.4AI score0.00398EPSS
SaveExploits0References3
CVE
CVE
•added 2024/08/12 8:49 p.m.•94 views

CVE-2024-43359

CVE-2024-43359 affects ZoneMinder. Multiple connected sources confirm a cross-site scripting vulnerability in the montagereview feature that is exploitable via the displayinterval, speed, and scale parameters. The issue is fixed in ZoneMinder releases 1.36.34 and 1.37.61. The available documents ...

6.1CVSS3.6AI score0.00398EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/08/12 12:00 a.m.•3 views

PT-2024-30527

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.36.34 ZoneMinder versions prior to 1.37.61 Description ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. Recommendations For versions...

6.1CVSS0.00398EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•2 views

CVE-2024-43359: Improper Neutralization of Input During Web Page Generation

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61...

6.1CVSS5.7AI score0.00398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•25 views

PT-2024-32723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero error can occur in the hisi calc effective speed function if the value of max speed hz is 0. The max speed hz value is provided by firmware, which is generally...

9.8CVSS5.6AI score0.00206EPSS
SaveExploits0
NVD
NVD
•added 2024/07/24 7:15 a.m.•46 views

CVE-2024-6553

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00373EPSS
SaveExploits0References2
CVE
CVE
•added 2024/07/24 6:42 a.m.•61 views

CVE-2024-6553

Summary of CVE-2024-6553 : The WP Meteor Website Speed Optimization Addon for WordPress is vulnerable to Full Path Disclosure in all versions up to and including 3.4.3. Root cause: the plugin uses wpdesk and leaves test files with display_errors enabled, allowing unauthenticated access to the web...

5.3CVSS5.1AI score0.00373EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2024/07/24 2:39 a.m.•16 views

WordPress WP Meteor Website Speed Optimization Addon plugin <= 3.4.3 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin WP Meteor Page Speed Optimization Topping versions = 3.4.3...

5.3CVSS6.7AI score0.00373EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/24 12:00 a.m.•6 views

CVE-2024-6553: Exposure of Sensitive Information to an Unauthorized Actor

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.4.3.This is due to the plugin utilizing wpdesk and leaving test files with displayerrors on. This makes it possible for unauthenticated attackers to...

5.3CVSS5.7AI score0.00373EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/24 12:00 a.m.•23 views

WordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.4.3 is vulnerable to Sensitive Data Exposure

Software WP Meteor Page Speed Optimization Topping Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.4.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6553 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1299014de04b Credits...

5.3CVSS6.6AI score0.00373EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2024/07/18 3:05 a.m.•11 views

SUSE CVE-2022-48850

In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speedshow When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. 755.549084 mlx5core...

4.4CVSS6.2AI score0.00211EPSS
SaveExploits0References9
Rows per page
Query Builder