Lucene search
+L

2003 matches found

Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•7 views

PT-2025-6887

Name of the Vulnerable Software and Affected Versions: Asus RT-N12E version 2.0.0.19 Description: A vulnerability was found in the Asus RT-N12E, classified as problematic. It affects an unknown function of the file sysinfo.asp. The manipulation of the SSID argument leads to cross-site scripting...

4.8CVSS0.00452EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2025/02/13 12:00 a.m.•28 views

The vulnerability of the form_fast_setting_wifi_set function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to buffer overflow during the processing of the ssid parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

10CVSS6.2AI score0.00792EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/10 12:00 a.m.•15 views

CVE-2024-46437

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a special...

6.6AI score0.01192EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/08 4:28 a.m.•25 views

CVE-2024-53943

An issue was discovered in NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic/radio endpoint is vulnerable to XSS via the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute JavaScript within the context of the current user by injecting JavaScript into the SSID...

6.1CVSS5.8AI score0.00314EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 3:20 a.m.•24 views

CVE-2021-35088

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure...

9.1CVSS7AI score0.0085EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 3:16 a.m.•20 views

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

10CVSS7.6AI score0.00827EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/03 12:00 a.m.•13 views

CVE-2024-53943

An issue was discovered in NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic/radio endpoint is vulnerable to XSS via the 2.4 GHz and 5 GHz name parameters, allowing an attacker to execute JavaScript within the context of the current user by injecting JavaScript into the SSID...

6.1AI score0.00314EPSS
SaveExploits0References3
CVE
CVE
•added 2025/02/03 12:00 a.m.•77 views

CVE-2024-53943

The NRadio N8-180 wireless receiver running NROS version 1.9.2.n3.c5 is vulnerable to Cross-Site Scripting (XSS) . The issue exists in the /cgi-bin/luci/nradio/basic/radio endpoint, where the 2.4 GHz and 5 GHz name parameters fail to properly neutralize input. An attacker can inject malicious Jav...

6.1CVSS6AI score0.00314EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•25 views

PT-2025-2590 · Google · Android Wificonfigurationutil

Name of the Vulnerable Software and Affected Versions: Android WifiConfigurationUtil affected versions not specified Description: A logic error in the code of WifiConfigurationUtil.java, specifically in the validateSsid function, could lead to a local denial of service due to a possible overflow ...

5.3CVSS7AI score0.00214EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•17 views

Google Android 安全漏洞

Google Android is a free and open source mobile operating system developed by Google Inc. based on the Linux kernel. Google Android suffers from a denial of service vulnerability that originates from a logic error in the validateSsid function code of WifiConfigurationUtil.java, which can be...

5.3CVSS6.7AI score0.00214EPSS
SaveExploits0References3
OSV
OSV
•added 2025/01/16 9:15 p.m.•13 views

CVE-2024-57575

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

9.8CVSS5.9AI score0.00792EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 12:00 a.m.•34 views

CVE-2024-57575

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

0.00792EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 12:00 a.m.•61 views

CVE-2024-57575

CVE-2024-57575 concerns the Tenda AC18 router (V15.03.05.19) where a stack overflow is triggered by the ssid parameter in the function form_fast_setting_wifi_set . The vulnerability is rooted in improper validation of input length for the ssid parameter, enabling a remote attacker over the networ...

9.8CVSS7.6AI score0.00792EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/16 12:00 a.m.•10 views

CVE-2024-57575

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

9.7AI score0.00792EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•22 views

Tenda AC18 安全漏洞

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the ssid parameter of the formfastsettingwifiset function failing to properly validate the length of the input data, which can be exploited by an attacker to...

9.8CVSS8.2AI score0.00792EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•5 views

CVE-2024-57575: Out-of-bounds Write

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...

9.8CVSS5.9AI score0.00792EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/06 4:15 a.m.•28 views

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

7.5CVSS0.00328EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/06 4:15 a.m.•17 views

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

7.5CVSS6AI score0.00328EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/06 3:18 a.m.•15 views

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

6.5AI score0.00328EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/06 3:18 a.m.•84 views

CVE-2024-20153

A security vulnerability exists in the wlan STA module of MediaTek Chipsets . An attacker can trick a client into connecting to an Access Point (AP) using a spoofed SSID , potentially leading to remote information disclosure . This attack requires no additional execution privileges and no user in...

7.5CVSS6.8AI score0.00328EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder