Lucene search
+L

3021 matches found

Positive Technologies
Positive Technologies
•added 2024/02/02 12:00 a.m.•3 views

PT-2024-21555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to missing clocks in the axg clk regmaps, which causes a kernel panic when attempting to read the /sys/kernel/debug/clk/clk summary file. The error occurs due to a...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0
OSV
OSV
•added 2024/02/01 2:15 p.m.•17 views

CVE-2024-24060

springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...

5.4CVSS5.8AI score0.00403EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/01 2:15 p.m.•41 views

CVE-2024-24062

springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/role...

5.4CVSS5.3AI score0.00424EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/02/01 12:00 a.m.•16 views

springboot-manager Security Vulnerability

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by Chinese liwenbin individual developer. A security vulnerability exists in springboot-manager v1.6, which originates from an easy cross-site scripting attack via...

5.4CVSS6.2AI score0.00403EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/02/01 12:00 a.m.•14 views

PT-2024-20259 · Unknown · Springboot-Manager

Name of the Vulnerable Software and Affected Versions: springboot-manager version 1.6 Description: The issue is related to Cross Site Scripting XSS via the "/sys/user" API endpoint. This allows for potential malicious script execution. The estimated number of potentially affected devices worldwid...

5.4CVSS5.3AI score0.00403EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•3 views

CVE-2024-24062: Improper Neutralization of Input During Web Page Generation

springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/role...

5.4CVSS5.7AI score0.00424EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•4 views

CVE-2024-24060: Improper Neutralization of Input During Web Page Generation

springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...

5.4CVSS5.7AI score0.00403EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/02/01 12:00 a.m.•22 views

PT-2024-20261 · Unknown · Springboot-Manager

Name of the Vulnerable Software and Affected Versions: springboot-manager version 1.6 Description: The issue is related to Cross Site Scripting XSS via the "/sys/role" API endpoint. This means an attacker could potentially inject malicious scripts into the webpage, affecting users who access the...

5.4CVSS5.1AI score0.00424EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/02/01 12:00 a.m.•14 views

CVE-2024-24060

springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...

6.2AI score0.00403EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/29 5:15 p.m.•41 views

CVE-2024-0788

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

6.6CVSS6AI score0.00236EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/29 5:15 p.m.•35 views

Code injection

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

1.7CVSS7.5AI score0.00236EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/29 4:20 p.m.•19 views

CVE-2024-0788 SUPERAntiSpyware Pro X v10.0.1260 - Kernel-level API parameters manipulation

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

6.6CVSS7.5AI score0.00236EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/29 4:20 p.m.•58 views

CVE-2024-0788 SUPERAntiSpyware Pro X v10.0.1260 - Kernel-level API parameters manipulation

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

6.6CVSS6.2AI score0.00236EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/29 4:20 p.m.•101 views

CVE-2024-0788

SUPERAntiSpyware Pro X v10.0.1260 is affected by a kernel‑level vulnerability in the saskutil64.sys driver, allowing API parameter manipulation leading to Denial of Service via IOCTL code 0x9C402140. Exploitation details are not specified in the provided sources; at least one PT Security advisory...

6.6CVSS5.8AI score0.00236EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2024/01/29 4:15 p.m.•11 views

CVE-2024-23441

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

5.5CVSS5.8AI score0.00238EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2024/01/29 4:15 p.m.•45 views

CVE-2024-23441

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

5.5CVSS5.5AI score0.00238EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/01/29 4:06 p.m.•52 views

CVE-2024-23441 Vba32 Antivirus v3.36.0 - Denial of Service (DoS)

Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver...

5.5CVSS5.8AI score0.00238EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•5 views

CVE-2024-0788: Improper Neutralization of Directives in Statically Saved Code

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver...

6.6CVSS5.8AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/29 12:00 a.m.•17 views

SUPERAntiSpyware Pro X Security Vulnerability

SUPERAntispyware is a security program from SUPERAntiSpyware. A security vulnerability exists in SUPERAntispyware Pro X version v10.0.1260, which originates from a programmatic denial of service by triggering the 0x9C402140 IOCTL code in the saskutil64.sys driver...

6.6CVSS6.9AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•21 views

PT-2024-15820 · Unknown · Saskutil64.Sys +1

Name of the Vulnerable Software and Affected Versions: SUPERAntiSpyware Pro X version 10.0.1260 Description: The issue concerns kernel-level API parameters manipulation and Denial of Service vulnerabilities. This can be triggered by manipulating the 0x9C402140 IOCTL code of the saskutil64.sys...

6.6CVSS5.6AI score0.00236EPSS
SaveExploits0References8
Rows per page
Query Builder