Lucene search
+L

1320 matches found

CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•25 views

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from an exception mishandling of invalid inputs by an API endpoint, which allows an attacker to generate an error message containing sensitive information about the...

7.1CVSS6.5AI score0.00352EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•25 views

Brokerage Wave 安全漏洞

Brokerage Wave is a frontend product from Brokerage, Inc. A security vulnerability exists in Brokerage Wave version 2.0, which stems from a lack of rate limiting for OTP requests in API endpoints, which could allow an attacker to cause OTP bombardment/flooding on the target system by sending...

7.1CVSS6.7AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 4:15 p.m.•45 views

CVE-2024-51399

Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft...

5.7CVSS0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/01 12:00 a.m.•16 views

CVE-2024-51398

Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background may lead to unauthorized access, data theft, and network attacks, seriously threatening network security...

7.3AI score0.00245EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•7 views

CVE-2024-51398: Weak Password Requirements

Altai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password leakage in the background may lead to unauthorized access, data theft, and network attacks, seriously threatening network security...

6.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•4 views

CVE-2024-51399: Insecure Storage of Sensitive Information

Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft...

5.7CVSS5.8AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 12:00 a.m.•31 views

CVE-2024-51399

Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft...

0.00225EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/11 12:00 a.m.•23 views

GIGA WIFI Wave KM08-708H 安全漏洞

GIGA WIFI Wave KM08-708H is a wireless device from GIGA WIFI Wave. A security vulnerability exists in the GIGA WIFI Wave KM08-708H v1.1, which originates from a buffer overflow when the strcpy function is executed without checking the length of the string...

6.5CVSS7.2AI score0.02971EPSS
SaveExploits0References3
Qualys Blog
Qualys Blog
•added 2024/09/27 4:47 p.m.•37 views

Qualys Ranked as a “Strong Performer” Among Top Vendors in Forrester Wave™ for Attack Surface Management

As the threat landscape evolves and presents new risks to security teams, the bar for attack surface management solutions is higher than ever. When Qualys introduced CyberSecurity Asset Management in 2021, the goal was to provide a unified view of the entire attack surface with visibility into...

7.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/09/10 2:00 p.m.•54 views

Update 22.16 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.16.64731, Platform Build 22.0.64727)

None None...

9.8CVSS7.3AI score0.01373EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/09/10 2:00 p.m.•56 views

Update 24.4 for Microsoft Dynamics 365 Business Central 2024 Release Wave 1 (Application Build 24.4.22925, Platform Build 24.0.22865)

None None...

9.8CVSS7.3AI score0.01373EPSS
SaveExploits0
CNVD
CNVD
•added 2024/09/06 12:00 a.m.•11 views

There is a file uploading vulnerability in Jiangsu Wave Information Consulting Company Limited's state-owned capital supervision informatization platform

Jiangsu Wave Information Consulting Co., Ltd. is an ERP senior industry consultants, deep technical background and industry experience, innovation, "integrity management, adhering to the advanced, deep technology" as the goal of the IT company. Jiangsu Wave Information Consulting Co., Ltd...

6.8AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2024/08/28 7:00 a.m.•20 views

Akamai Named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2024

...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/26 4:53 p.m.•14 views

Malicious code in wave-opensdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dbda9bf70afa0311dbd7b22b5209531b90399bcc4a5cd5846d3f5fa89314f47 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.3AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/07/26 4:53 p.m.•15 views

MAL-2024-12368 Malicious code in wave-opensdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dbda9bf70afa0311dbd7b22b5209531b90399bcc4a5cd5846d3f5fa89314f47 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.2AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/06/27 9:32 p.m.•1 views

fluoriclogppka (>=0.1.0, <=0.2.7), h2o-wave-ml (>=0.3.0, <=0.5.0) +3 more potentially affected by CVE-2024-5979 via h2o (>=3.18.0.8, <=3.44.0.3)

h2o PYPI version =3.18.0.8, =0.1.0, =0.3.0, =0.4.5, =0.0.1, =0.0.102 - tsanalysis 0.1.0 Source cves: CVE-2024-5979 Source advisory: GHSA-58M3-RCVP-F9WW...

7.5CVSS0.00794EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2024/06/26 12:00 a.m.•29 views

Hanwha Vision IP Cameras Command Injection (CVE-2023-5747)

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has releas...

8.8CVSS8.2AI score0.00563EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:49 p.m.•7 views

Malicious code in awesome-print_carrier_wave_uploader (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Microsoft KB
Microsoft KB
•added 2024/06/11 2:00 p.m.•52 views

Update 23.7 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.7.18957, Platform Build 23.0.18933)

None None...

8.8CVSS7.1AI score0.0343EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/06/11 2:00 p.m.•56 views

Update 22.13 for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 (Application Build 22.13.64344, Platform Build 22.0.64336)

None None...

8.8CVSS7.1AI score0.0343EPSS
SaveExploits0
Rows per page
Query Builder