Lucene search
+L

16675 matches found

Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•2 views

PT-2025-3247

Name of the Vulnerable Software and Affected Versions SSL Wireless SMS Notification versions n/a through 3.5.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...

9.3CVSS0.00412EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•21 views

PT-2025-1004 · Unknown · 501 Wireless Client Bridge

Name of the Vulnerable Software and Affected Versions: 501 Wireless Client Bridge affected versions not specified Description: The issue concerns multiple command injection vulnerabilities in the web interface of the 501 Wireless Client Bridge. These vulnerabilities could lead to authenticated...

9CVSS8.4AI score0.01539EPSS
SaveExploits0References17
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•19 views

Hewlett Packard Enterprise 501 Wireless Client Bridge 命令注入漏洞

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

7.2CVSS7.5AI score0.01539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•6 views

CVE-2024-54006: Improper Neutralization of Special Elements used in a Command

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

7.2CVSS6.5AI score0.01539EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2024-54007: Improper Neutralization of Special Elements used in a Command

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

7.2CVSS6.5AI score0.01539EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•6 views

CVE-2024-56284: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

9.3CVSS5.8AI score0.00412EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2025/01/07 12:00 a.m.•24 views

HPESBNW04763 rev.1 - HPE Aruba Networking 501 Wireless Client Bridge Authenticated Remote Command Injection Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Arbitrary Command Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 501 Client Bridge - Please refer to the "Vulnerability Summary" for version details. HP 501 Wireless Client Bridge - Pleas...

7.2CVSS6.2AI score0.01539EPSS
SaveExploits0
osv_usn
osv_usn
•added 2025/01/06 7:14 p.m.•34 views

USN-7184-1 linux-aws, linux-kvm vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

7.8CVSS6.8AI score0.00886EPSS
SaveExploits2References31
NVD
NVD
•added 2025/01/06 4:15 a.m.•28 views

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

7.5CVSS0.00328EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/01/06 4:15 a.m.•12 views

CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue I...

8.1CVSS6.2AI score0.00135EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•24 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from incorrect exception handling in the wlan STA driver module, where reachable assertions may exist...

4.4CVSS6.7AI score0.00092EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/03 11:11 a.m.•16 views

WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin SSL Wireless SMS Notification versions = 3.5.0...

9.3CVSS8.1AI score0.00412EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/03 12:00 a.m.•22 views

PT-2025-8813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the wifi driver rtw89. The issue occurs when WoWLAN Wake-on-Wireless-LAN fails during the resume flow, causing the mgn...

7.8CVSS6.4AI score0.00188EPSS
SaveExploits0References24
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•11 views

PT-2025-39344

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow exists in the WBMP file parsing functionality of GIMP. This issue could allow for remote code execution. Recommendations At the moment, there is no information about a newer...

7.8CVSS8AI score0.03027EPSS
SaveExploits0References55
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•21 views

PT-2025-34404

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0-rc5-wt-g03960e6f9d47 33 and earlier. Description: A missing lock in the cfg80211 check and end cac function within the Linux kernel's wireless subsystem can lead to issues when callers of wdev chandef do not hold...

8.8CVSS6AI score0.00181EPSS
SaveExploits0
NVD
NVD
•added 2024/12/31 10:15 a.m.•20 views

CVE-2024-56220

Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...

9.8CVSS0.00473EPSS
SaveExploits0References1
Prion
Prion
•added 2024/12/31 10:15 a.m.•23 views

CVE-2024-56220

Incorrect Privilege Assignment vulnerability in SSL Wireless SSL Wireless SMS Notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...

0.00473EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/31 10:05 a.m.•31 views

CVE-2024-56220 WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...

9.8CVSS0.00473EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/31 10:05 a.m.•15 views

CVE-2024-56220 WordPress SSL Wireless SMS Notification plugin <= 3.6.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...

9.8CVSS7.2AI score0.00473EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/31 10:05 a.m.•78 views

CVE-2024-56220

CVE-2024-56220 covers an Incorrect Privilege Assignment vulnerability in the SSL Wireless SMS Notification WordPress plugin. The issue allows unauthenticated Privilege Escalation by exploiting faulty privilege handling in the plugin’s SMS notification feature, affecting SSL Wireless SMS Notificat...

9.8CVSS7.2AI score0.00473EPSS
SaveExploits0References1
Rows per page
Query Builder