25084 matches found
CVE-2019-1815
A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper...
DEBIAN-CVE-2024-58055
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command...
UBUNTU-CVE-2024-58059
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvcprobe If uvcprobe fails, it can end up calling uvcstatusunregister before uvcstatusinit is called. Fix this by checking if dev-status is NULL or not in uvcstatusunregister...
UBUNTU-CVE-2024-58055
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command...
CVE-2024-58059 media: uvcvideo: Fix deadlock during uvc_probe
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvcprobe If uvcprobe fails, it can end up calling uvcstatusunregister before uvcstatusinit is called. Fix this by checking if dev-status is NULL or not in uvcstatusunregister...
CVE-2024-58059 media: uvcvideo: Fix deadlock during uvc_probe
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvcprobe If uvcprobe fails, it can end up calling uvcstatusunregister before uvcstatusinit is called. Fix this by checking if dev-status is NULL or not in uvcstatusunregister...
CVE-2024-58055 usb: gadget: f_tcm: Don't free command immediately
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command...
CVE-2024-13894
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. When an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by...
CVE-2024-13892
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly...
CVE-2024-13893
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory. For the telnet service to be enabled, the...
CVE-2024-38311
creationtimestamp| type| source ---|---|--- 2025-03-06 14:14:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114115902257488846 2025-03-06 15:30:46+00:00| seen| https://t.me/cvedetector/19702 2025-03-06 15:44:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljptl2avit...
CVE-2024-13894 Path traversal in Smartwares cameras
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. When an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by...
CVE-2024-13893
Summary of CVE-2024-13892 / CVE-2024-13893 / CVE-2024-13894 (Smartwares CIP-37210AT, C724IP and similar firmware up to 3.3.0): CVE-2024-13892 (NVD/Red Hat): Command injection vulnerability during initialization when a mobile app provides AP credentials. Input is not properly sanitized. Patch stat...
CVE-2024-13892 Command Injection in Smartwares cameras
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to command injection. During the initialization process, a user has to use a mobile app to provide devices with Access Point credentials. This input is not properly...
CVE-2025-1696
creationtimestamp| type| source ---|---|--- 2025-03-06 12:33:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6667 2025-03-06 15:30:39+00:00| seen| https://t.me/cvedetector/19697 2025-08-18 13:31:23+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:43+00:00| seen|...
CVE-2025-20910
creationtimestamp| type| source ---|---|--- 2025-03-06 05:36:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6634 2025-03-08 04:34:09+00:00| seen| Telegram/nsZx3cLLZChTegwmrc23s1xmnXYtYAuhB50yjIxICO4SovIF...
CVE-2025-20932
creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljorizekt32a 2025-03-06 05:36:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6637 2025-03-06 07:09:12+00:00| seen| https://t.me/cvedetector/19672...
CVE-2025-20930
creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljoriz4ing2o 2025-03-06 05:36:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6639 2025-03-06 07:09:10+00:00| seen| https://t.me/cvedetector/19669...
CVE-2025-25012
creationtimestamp| type| source ---|---|--- 2025-03-06 04:35:53+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljoo73xra22j 2025-03-06 06:11:01+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3ljotjeyg422l 2025-03-06 11:33:00+00:00| seen|...