196 matches found
CVE-2023-47654
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in livescore.Bz BZScore – Live Score plugin = 1.03 versions...
D-Link DIR-878 安全漏洞
The D-Link DIR-878 is a wireless router from China's AUO D-Link. An information disclosure vulnerability exists in the D-Link DIR-878 version 1.03, which stems from insufficient protection of sensitive information in the component HTTP POST request handler, and can be exploited by an attacker to...
WordPress plugin Visual Sound 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2024-38636 · WordPress · The Visual Sound
Name of the Vulnerable Software and Affected Versions: The Visual Sound WordPress plugin versions 1.03 and earlier Description: The issue is related to the lack of a CSRF check when updating settings in the plugin, which could allow attackers to make a logged-in admin change them via a CSRF attac...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
PT-2024-28884 · D Link · D-Link Dap-1650
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 Firmware version 1.03 Description: A Directory Traversal issue allows a local attacker to escalate privileges via the hedwig.cgi component. Recommendations: For D-Link DAP-1650 Firmware version 1.03, consider restricting acces...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
CVE-2024-40505
Summary: CVE-2024-40505 is a directory traversal vulnerability in D-Link DAP-1650 firmware v1.03, exploitable by a local attacker via hedwig.cgi to achieve privilege escalation. The vulnerability affects the device’s firmware components and has a high impact on confidentiality, integrity, and ava...
OPENSUSE-SU-2024:11477-1 libucl1-1.03-4.9 on GA media
These are all security issues fixed in the libucl1-1.03-4.9 package on the GA media of openSUSE Tumbleweed...
Hitron Systems DVR HVR-16781 Security Vulnerability
Hitron Systems DVR is a digital video recorder from Hitron Systems, a South Korean company. A security vulnerability exists in Hitron Systems DVR HVR-16781 versions 1.03 through 4.02, which stems from incorrect input validation. An attacker could exploit the vulnerability to trigger a cyber attac...
Hitron Systems DVR Security Vulnerability
Hitron Systems DVR is a digital video recorder from Hitron Systems, a South Korean company. A security vulnerability exists in Hitron Systems DVR HVR-8781 versions 1.03 through 4.02, which stems from incorrect input validation. An attacker could exploit the vulnerability to trigger a cyber attack...
PT-2024-19556
Name of the Vulnerable Software and Affected Versions Hitron Systems DVR HVR-16781 versions 1.03 through 4.02 Description The issue is related to improper input validation, which allows an attacker to cause a network attack when using the default admin ID and password. Recommendations For version...
PT-2024-1194
Name of the Vulnerable Software and Affected Versions Hitron Systems DVR HVR-4781 versions 1.03 through 4.02 Description The issue is related to the use of default credentials in the Hitron Systems DVR HVR-4781, which can be exploited by a remote attacker to cause a denial of service by utilizing...
CVE-2023-47654
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in livescore.Bz BZScore – Live Score plugin = 1.03 versions...
CVE-2023-36089
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-37564
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier,...
PT-2023-26021 · Elecom · Elecom Wrc-1167Febk-A +11
Name of the Vulnerable Software and Affected Versions: ELECOM wireless LAN routers versions v1.03 and earlier ELECOM WRC-1167GHBK-S versions v1.03 and earlier ELECOM WRC-1167GEBK-S versions v1.03 and earlier ELECOM WRC-1167FEBK-S versions v1.04 and earlier ELECOM WRC-1167GHBK3-A versions v1.24 an...
D-Link DSL-3782 操作系统命令注入漏洞
The D-Link DSL-3782 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL-3782 version v.1.03. An attacker can exploit this vulnerability to execute arbitrary code as root via the network settings page...