Lucene search
+L

14518 matches found

Cvelist
Cvelist
added 2025/01/07 5:17 p.m.27 views

CVE-2024-54007 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

7.2CVSS0.0155EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 5:12 p.m.83 views

CVE-2024-54006

CVE-2024-54006 affects the Hewlett Packard Enterprise 501 Wireless Client Bridge web interface. Multiple command-injection vulnerabilities allow authenticated remote command execution, enabling an attacker with administrative credentials to run arbitrary commands as a privileged OS user. The CVSS...

7.2CVSS7.7AI score0.0155EPSS
SaveIn wildExploits0References1
Cvelist
Cvelist
added 2025/01/07 5:12 p.m.24 views

CVE-2024-54006 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

7.2CVSS0.0155EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.11 views

CVE-2024-56284

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

9.3CVSS0.004EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.52 views

CVE-2024-56284

CVE-2024-56284 affects the WordPress plugin SSL Wireless SMS Notification. The issue is an SQL Injection caused by improper neutralization of input in SQL commands. Affected version range: from n/a up to 3.5.0. CVSS v3.1 base score 9.3 (CRITICAL), vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. Root...

9.3CVSS7.3AI score0.004EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/07 10:49 a.m.28 views

CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

9.3CVSS0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:49 a.m.8 views

CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SSL Wireless SSL Wireless SMS Notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...

9.3CVSS7.6AI score0.004EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:00 a.m.10 views

PT-2025-1004 · Unknown · 501 Wireless Client Bridge

Name of the Vulnerable Software and Affected Versions: 501 Wireless Client Bridge affected versions not specified Description: The issue concerns multiple command injection vulnerabilities in the web interface of the 501 Wireless Client Bridge. These vulnerabilities could lead to authenticated...

9CVSS8.4AI score0.0155EPSS
SaveExploits0References17
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

Hewlett Packard Enterprise 501 Wireless Client Bridge 命令注入漏洞

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

7.2CVSS7.5AI score0.0155EPSS
SaveExploits0References2
HPE Security Bulletins
HPE Security Bulletins
added 2025/01/07 12:00 a.m.12 views

HPESBNW04763 rev.1 - HPE Aruba Networking 501 Wireless Client Bridge Authenticated Remote Command Injection Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Arbitrary Command Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 501 Client Bridge - Please refer to the "Vulnerability Summary" for version details. HP 501 Wireless Client Bridge - Pleas...

7.2CVSS6.2AI score0.0155EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.13 views

Hewlett Packard Enterprise 501 Wireless Client Bridge 命令注入漏洞

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

7.2CVSS7.6AI score0.0155EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/06 7:14 p.m.22 views

USN-7184-1 linux-aws, linux-kvm vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

7.8CVSS6.8AI score0.00886EPSS
SaveExploits2References31
NVD
NVD
added 2025/01/06 4:15 a.m.19 views

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

7.5CVSS0.00323EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/01/06 4:15 a.m.6 views

CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue I...

8.1CVSS6.2AI score0.00136EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/06 12:00 a.m.12 views

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from incorrect exception handling in the wlan STA driver module, where reachable assertions may exist...

4.4CVSS6.7AI score0.00092EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/03 11:11 a.m.10 views

WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin SSL Wireless SMS Notification versions = 3.5.0...

9.3CVSS8.1AI score0.004EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.18 views

PT-2025-8813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the wifi driver rtw89. The issue occurs when WoWLAN Wake-on-Wireless-LAN fails during the resume flow, causing the mgn...

5.5CVSS6.4AI score0.00184EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.14 views

PT-2025-34404

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.14.0-rc5-wt-g03960e6f9d47 33 and earlier. Description: A missing lock in the cfg80211 check and end cac function within the Linux kernel's wireless subsystem can lead to issues when callers of wdev chandef do not hold...

5.5CVSS6AI score0.00177EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-39344

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow exists in the WBMP file parsing functionality of GIMP. This issue could allow for remote code execution. Recommendations At the moment, there is no information about a newer...

7.8CVSS8AI score0.02814EPSS
SaveExploits0References49
NVD
NVD
added 2024/12/31 10:15 a.m.16 views

CVE-2024-56220

Incorrect Privilege Assignment vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through = 3.6.0...

9.8CVSS0.0046EPSS
SaveExploits0References1
Rows per page
Query Builder