15 matches found
CVE-2026-15484
CVE-2026-15484 affects TRENDnet TEW-821DAP (firmware 1.12B01). The vulnerable element is the function sub_41EC14 in /goform/tools_nslookup of the ssi component, where input manipulation leads to a buffer overflow. Exploitation is described as possible to perform remotely via network. The vendor n...
CVE-2026-15484
creationtimestamp| type| source ---|---|--- 2026-07-11 12:30:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116901350103809605 2026-07-12 07:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905831499436002 2026-07-12 07:30:25+00:00| seen|...
CVE-2025-15484
creationtimestamp| type| source ---|---|--- 2026-04-01 08:21:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migb4fqpml2d 2026-04-01 14:51:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3migwwfbs252t 2026-04-01 15:20:57+00:00| seen|...
CVE-2019-15484
Bolt before 3.6.10 has XSS via an image's alt or title field...
CVE-2019-15484 affecting package bolt 0.9.2-2
CVE-2019-15484 affecting package bolt 0.9.2-2. This CVE either no longer is or was never applicable...
Advisory ROSA-SA-2021-1809
Software: bolt 0.7 OS: Cobalt 7.9 CVE-ID: CVE-2015-7309 CVE-Crit: HIGH CVE-DESC: The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, allowing remote authenticated users to execute arbitrary code by renaming a created file and then directly accessing it...
CVE-2020-15484
The CVE-2020-15484 issue affects Nescomed Multipara Monitor M1000 devices, where the underlying Linux system stores data in cleartext with no integrity protection. The risk is limited to data confidentiality and tampering protection within the device’s storage; the reports do not provide exploit ...
CVE-2019-15484
CVE-2019-15484 affects Bolt before 3.6.10 with an XSS via an image’s alt or title field. The root cause is tied to unsanitized image metadata in Bolt’s handling/rendering path. The connected documents note a fix in Bolt 3.6.10 (release/tag 3.6.10). Exploitation details are not provided in the sup...
CVE-2018-15484
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01...
CVE-2018-15484
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Unauthenticated Remote Code Execution is possible through the open HTTP interface by modifying autoexec.bat, aka KONE-01...
CVE-2018-15484
The CVE-2018-15484 entry affects KONE Group Controller (KGC) devices prior to 4.6.5. The issue allows unauthenticated remote code execution via the open HTTP interface by modifying autoexec.bat (aka KONE-01). Impact is high: attacker can achieve remote code execution with network access and no pr...
KONE KGC 4.6.4 DoS / Code Execution / LFI / Bypass
Vulnerabilities in KONEs Group Controller KGC ------------------------------------------------------------------------- Introduction ============ Vulnerabilities were identified in the KONE Group Controller KGC. These were discovered during a black box assessment and therefore the vulnerability...
KONE KGC 4.6.4 - Multiple Vulnerabilities
KONE KGC versions 4.6.4 and below suffer from unauthenticated remote code execution, denial of service, local file inclusion, and missing FTP access control vulnerabilities. Vulnerabilities in KONEs Group Controller KGC -------------------------------------------------------------------------...