Lucene search
+L

5666 matches found

Positive Technologies
Positive Technologies
•added 2022/03/23 12:00 a.m.•4 views

PT-2025-8007

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc6 Description A deadlock vulnerability has been identified in the Linux kernel, specifically in the btrfs file system. The issue arises when the btrfs can activate zone function is called while holding t...

5.5CVSS5.5AI score0.00184EPSS
SaveExploits0References18
osv_gsd
osv_gsd
•added 2022/03/18 12:25 a.m.•9 views

GSD-2022-1000865 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/03/18 12:15 a.m.•23 views

GSD-2022-1000750 hwmon: Handle failure to register sensor with thermal zone correctly

hwmon: Handle failure to register sensor with thermal zone correctly This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•2 views

PT-2022-29139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description The issue concerns a failure to handle the registration of a sensor with a thermal zone correctly in the hwmon component. This problem was introduced in version v5.8 and is fixed in version...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•3 views

PT-2022-29024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue concerns a failure to handle the registration of a sensor with a thermal zone correctly. This problem was introduced in version v5.8 and is fixed in version v5.16.12. The actual...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•3 views

PT-2022-29089

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue concerns a failure to handle the registration of a sensor with a thermal zone correctly in the hwmon component. This problem was introduced in version v5.8 and is fixed in version...

5.7AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/03/17 12:00 a.m.•66 views

ARRIS TR3300 Command Injection Vulnerability (CNVD-2022-68526)

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the htimezone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can ...

10CVSS4.3AI score0.0342EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/15 10:15 p.m.•10 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS6.1AI score0.0342EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/03/15 10:15 p.m.•25 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

9.8CVSS7.5AI score0.0342EPSS
SaveExploits1References1
NVD
NVD
•added 2022/03/15 10:15 p.m.•32 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS0.0342EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/15 10:15 p.m.•28 views

Command injection

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS9.8AI score0.0342EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/03/15 9:56 p.m.•38 views

CVE-2022-27000

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the hprimaryntpserver, hbackupntpserver, and htimezone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10AI score0.0342EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/15 9:56 p.m.•102 views

CVE-2022-27000

Arris TR3300 v1.0.13 is affected by a command-injection vulnerability in the time and time zone function, exploitable via h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. The issue allows arbitrary command execution and is described across multiple sources (NVD/Red Hat/CNVD/...

10CVSS9.8AI score0.0342EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•21 views

ARRIS SBR-AC1900P和ARRIS SBR-AC3200P 操作系统命令注入漏洞

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS USA. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the TimeZone parameter in the ntp function failing to properly filter the construct command special characters, commands,...

9.8CVSS5.9AI score0.02692EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•20 views

ARRIS TR3300 命令注入漏洞

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS U.S.A. A command injection vulnerability exists in ARRIS TR3300, which stems from the failure of the htimezone parameter in the time zone function to properly filter the construct command special characters, commands, etc. The vulnerability can ...

10CVSS6AI score0.0342EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/15 12:00 a.m.•19 views

PT-2022-18177 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the time and time zone function. This vulnerability is exploited via the h primary ntp server, h backup ntp server, and h time zone...

10CVSS9.7AI score0.0342EPSS
SaveExploits1References3
Akamai Blog
Akamai Blog
•added 2022/03/10 2:00 p.m.•43 views

DNS Cybersquatting: The Case for Edge DNS Zone Protect

Cybersquatting, also known as domain squatting, is a type of scam that mimics a brand's domain to confuse potential victims and gain their trust. According to Revision Legal, “Cybersquatting is prohibited in the U.S. by federal law under the Anticybersquatting Consumer Protection Act ACPA.” These...

7AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/03/10 10:00 a.m.•17 views

CVE-2022-0677

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools in relay role, GravityZone in Update Server role allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to...

7.5CVSS7.2AI score0.01249EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2022/03/02 5:50 p.m.•10 views

OPENSUSE-SU-2022:0675-1 Security update for ldns

This update for ldns fixes the following issues: - CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file bsc1195057. - CVE-2020-19861: Fixed heap-based out of bounds read in ldnsnsec3saltdata bsc1195058...

7.5CVSS6.8AI score0.01493EPSS
SaveExploits2References5
osv_suse
osv_suse
•added 2022/03/02 5:50 p.m.•14 views

SUSE-SU-2022:0675-1 Security update for ldns

This update for ldns fixes the following issues: - CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file bsc1195057. - CVE-2020-19861: Fixed heap-based out of bounds read in ldnsnsec3saltdata bsc1195058...

7.5CVSS6.9AI score0.01493EPSS
SaveExploits2References5
Rows per page
Query Builder