Lucene search
+L

288 matches found

Positive Technologies
Positive Technologies
•added 2021/07/15 12:00 a.m.•3 views

PT-2021-20674

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1330 version 1.13B01 BETA Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of t...

8.8CVSS0.02333EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•17 views

D-Link DAP-1330 缓冲区错误漏洞

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. The D-Link DAP-1330 suffers from a buffer error vulnerability that arises from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker could exploit...

8.8CVSS6.6AI score0.02333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•6 views

CVE-2021-34830: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results...

8.8CVSS6.7AI score0.02333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•16 views

D-Link DAP-1330 安全漏洞

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which originates from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker...

8.8CVSS5.9AI score0.02333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•8 views

CVE-2021-34829: Buffer Copy without Checking Size of Input

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue resul...

8.8CVSS6.6AI score0.02333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/15 12:00 a.m.•9 views

CVE-2021-34827: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue...

8.8CVSS6.7AI score0.02333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/10 12:00 a.m.•2 views

PT-2021-20675

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1330 version 1.13B01 BETA Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of t...

8.8CVSS0.02333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/06/10 12:00 a.m.•4 views

PT-2021-20673

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1330 version 1.13B01 BETA Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of t...

8.8CVSS0.02333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/06/10 12:00 a.m.•4 views

PT-2021-20676

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1330 version 1.13B01 BETA Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the handling of t...

8.8CVSS0.02333EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2021/06/10 12:00 a.m.•66 views

(0Day) D-Link DAP-1330 lighttpd get_soap_action Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue results from the...

8.8CVSS2.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/10 12:00 a.m.•55 views

(0Day) D-Link DAP-1330 HNAP checkValidRequest Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction HTTP header. The issue results from the...

8.8CVSS2.8AI score0.02333EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/10 12:00 a.m.•92 views

(0Day) D-Link DAP-1330 HNAP Cookie Header Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the Cookie HTTP header. The issue results from the lac...

8.8CVSS3.4AI score0.02333EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/10 12:00 a.m.•67 views

(0Day) D-Link DAP-1330 lighttpd http_parse_request Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the HNAPAUTH HTTP header. The issue results from the...

8.8CVSS3.1AI score0.02333EPSS
SaveExploits0
CVE
CVE
•added 2021/02/04 4:41 p.m.•91 views

CVE-2021-1330

Cisco Small Business RV016/RV042/RV042G/RV082/RV320/RV325 routers suffer multiple flaws in the web-based management interface due to improper input validation. An authenticated admin could craft HTTP requests to run arbitrary code as root or cause a device reload, leading to DoS. These issues req...

9CVSS7.3AI score0.02753EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2020/07/14 11:15 p.m.•12 views

CVE-2020-1330

An information disclosure vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'...

5.5CVSS6.7AI score0.01278EPSS
SaveExploits0References1
CVE
CVE
•added 2020/07/14 10:54 p.m.•117 views

CVE-2020-1330

CVE-2020-1330 is an information-disclosure vulnerability in Windows Mobile Device Management Diagnostics. The issue arises when MDM Diagnostics improperly handles junctions, enabling an attacker who can log on to read files via a specially crafted application. Microsoft’s advisory states that the...

5.5CVSS6.5AI score0.01278EPSS
SaveExploits0References1Affected Software3
OpenVAS
OpenVAS
•added 2020/04/01 12:00 a.m.•45 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2020-1330)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.05757EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2020/03/20 12:00 a.m.•17 views

The vulnerability of the HNAP microprogramming software implementation for D-Link DAP-1330 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the HNAP microprogramming software for D-Link DAP-1330 wireless routers is related to errors in the implementation of the authentication algorithm. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.06544EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2020/02/24 12:00 a.m.•18 views

D-Link DAP-1330 Certification Bypass Vulnerability

The D-Link DAP-1330 is an N300 Wi-Fi range extender. An authentication bypass vulnerability exists in the handling of HNAP login requests in the D-Link DAP-1330 1.10B01 BETA. The vulnerability stems from a lack of proper cookie handling. An attacker could exploit the vulnerability to execute...

8.8CVSS8AI score0.06544EPSS
SaveExploits0References1
OSV
OSV
•added 2020/02/22 12:15 a.m.•14 views

CVE-2020-8861

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

8.8CVSS6.1AI score0.06544EPSS
SaveExploits0References2
Rows per page
Query Builder