Lucene search
K

149 matches found

Cvelist
Cvelist
added 4 days ago27 views

CVE-2021-4479 Dräger Atlan A350 1.00-1.01 DoS via Medibus Interface

Dräger Atlan A350 software versions 1.00 through 1.01 contains an improper input handling vulnerability that allows attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Attackers can transmit malformed data to overload th...

6.3CVSS0.00043EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 4 days ago6 views

PT-2026-45815

Name of the Vulnerable Software and Affected Versions Dräger Atlan A350 versions 1.00 through 1.01 Description Improper input handling allows attackers to cause a denial of service by sending specifically crafted non-Medibus-compliant data through the Medibus interface. Transmitting malformed dat...

6.3CVSS5.8AI score0.00043EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/12 6:31 a.m.7 views

EUVD-2026-29378

UNSUPPORTED WHEN ASSIGNED A buffer overflow vulnerability in the formWep, formWlAc, formPasswordSetup, formUpgradeCert, and formDelcert functions of the “webs” binary in Zyxel NWA1100-N customized firmware version 1.00AACE.1C0 could allow an attacker to trigger a denial-of-service DoS condition b...

7.5CVSS6AI score0.00335EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/12 3:56 a.m.34 views

CVE-2026-7287

UNSUPPORTED WHEN ASSIGNED A buffer overflow vulnerability in the formWep, formWlAc, formPasswordSetup, formUpgradeCert, and formDelcert functions of the “webs” binary in Zyxel NWA1100-N customized firmware version 1.00AACE.1C0 could allow an attacker to trigger a denial-of-service DoS condition b...

7.5CVSS0.00335EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/12 3:56 a.m.5 views

CVE-2026-7287

UNSUPPORTED WHEN ASSIGNED A buffer overflow vulnerability in the formWep, formWlAc, formPasswordSetup, formUpgradeCert, and formDelcert functions of the “webs” binary in Zyxel NWA1100-N customized firmware version 1.00AACE.1C0 could allow an attacker to trigger a denial-of-service DoS condition b...

7.5CVSS6AI score0.00335EPSS
Exploits0References1
CVE
CVE
added 2026/05/12 3:25 a.m.6 views

CVE-2026-7256

CVE-2026-7256 affects Zyxel WRE6505 v2, firmware V1.00(ABDV.3)C0. The CGI program is vulnerable to a command injection that can let an adjacent LAN attacker execute OS commands by sending a crafted HTTP request. The description does not provide root cause specifics beyond the CGI-invocation path,...

8.8CVSS5.9AI score0.01406EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.4 views

PT-2026-39935

UNSUPPORTED WHEN ASSIGNED A buffer overflow vulnerability in the formWep, formWlAc, formPasswordSetup, formUpgradeCert, and formDelcert functions of the “webs” binary in Zyxel NWA1100-N customized firmware version 1.00AACE.1C0 could allow an attacker to trigger a denial-of-service DoS condition b...

7.5CVSS6AI score0.00335EPSS
Exploits0References2
OSV
OSV
added 2025/12/11 6:16 p.m.1 views

CVE-2025-56079

OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

8.8CVSS6.1AI score0.00675EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/11 12:0 a.m.3 views

CVE-2025-56124

OS Command Injection vulnerability in Ruijie X60 PRO X6010212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...

7.5AI score0.00184EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/12/11 12:0 a.m.22 views

CVE-2025-56090

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

0.00183EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.4 views

PT-2025-50687

Name of the Vulnerable Software and Affected Versions Ruijie RG-EW1200G PRO versions 1.00 through 4.00 Description An OS Command Injection issue exists in Ruijie RG-EW1200G PRO. Attackers can execute arbitrary commands by sending a specially crafted POST request to the module get function within...

8.8CVSS7.6AI score0.00915EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/11/24 6:34 p.m.10 views

CVE-2025-13562

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

9.8CVSS7.2AI score0.00153EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.3 views

D-Link DWR-M920和D-Link DIR-822K 安全漏洞

D-Link DWR-M920 and D-Link DIR-822K are both products of China's AUO D-Link.The D-Link DWR-M920 is a router.The D-Link DIR-822K is a wireless router.The D-Link DWR-M920 and D-Link DIR-822K are both products of China's AUO D-Link.The D-Link DWR-M920 and D-Link DIR-822K are wireless routers. A...

9CVSS8.9AI score0.00149EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.1 views

D-Link DIR-852 命令注入漏洞

D-Link DIR-852 is a router from China AUO D-Link. A command injection vulnerability exists in the D-Link DIR-852 version 1.00, which stems from the misuse of the parameter service in the file /gena.cgi, and could lead to a command injection attack...

9.8CVSS7.7AI score0.00153EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-1320

Malware in sbrugna...

7.5CVSS6.4AI score0.00541EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31019

Malicious code in bioql PyPI...

6.6AI score0.00233EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 8:3 a.m.4 views

CVE-2024-51848

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Parallaxer parallaxer-lite-parallax-effects-on-images allows Stored XSS.This issue affects Parallaxer: from n/a through = 1.00...

6.5CVSS7.2AI score0.00295EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:16 a.m.2 views

CVE-2023-22922

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device...

7.5CVSS7.3AI score0.00452EPSS
Exploits0References1
OSV
OSV
added 2025/02/21 3:15 p.m.1 views

CVE-2025-1539

A vulnerability, which was classified as critical, has been found in D-Link DAP-1320 1.00. Affected by this issue is the function replacespecialchar of the file /storagein.pd-XXXXXX. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been...

9.8CVSS6.3AI score
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/02/21 12:0 a.m.2 views

PT-2025-7523 · D Link · D-Link Dap-1320

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1320 version 1.00 Description: A critical issue has been found, affecting the function replace special char of the file /storagein.pd-XXXXXX. This issue leads to a stack-based buffer overflow and can be exploited remotely. The...

9.8CVSS7.5AI score0.00108EPSS
Exploits0References14
Rows per page
Query Builder