192 matches found
D-Link DAP-1620 Path Traversal Vulnerability
A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...
CVE-2021-46381
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
CVE-2021-46381
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
CVE-2021-46381
CVE-2021-46381 affects the D-Link DAP-1620 (A1) device, where a path traversal leads to Local File Inclusion. The vulnerability allows reading sensitive internal files such as /etc/passwd and /etc/shadow via crafted input to the device’s web interface (notably through apply.cgi). Public exploit/m...
D-Link DAP-1620 路径遍历漏洞
A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...
AlmaLinux 8 : linux-firmware (ALSA-2021:1620)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1620 advisory. - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may allo...
PT-2022-1944
Name of the Vulnerable Software and Affected Versions D-Link DAP-1620 affected versions not specified Description The issue is related to Local File Inclusion due to path traversal errors in the software, allowing unauthorized access to internal files. This can lead to the reading of sensitive...
CVE-2021-1620
The CVE-2021-1620 issue affects Cisco IOS and IOS XE Software, specifically the IKEv2 AutoReconnect feature. The vulnerability arises because the code does not release the allocated IP address under certain failure conditions, allowing an authenticated, remote attacker to exhaust the local pool o...
CVE-2021-1620 Cisco IOS and IOS XE Software IKEv2 AutoReconnect Feature Denial of Service Vulnerability
A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...
CentOS 8 : linux-firmware (CESA-2021:1620)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1620 advisory. - kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 Note that Nessus has not tested for this issue but has instead relied only on the...
Huawei EulerOS: Security Advisory for p11-kit (EulerOS-SA-2021-1620)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1620 Junos OS Evolved: Configd leaks hashes via log file and is world readable
A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1...
CVE-2020-1620
CVE-2020-1620 : A local, authenticated user can obtain hashed login passwords via the configd streamer log in Juniper Networks Junos OS Evolved before version 19.3R1. Affected component: configd streamer log. Root cause: disclosure of password hashes through log output. Impact: confidential data ...
Cisco Prime Data Center Network Manager Remote Code Execution (CVE-2019-1620)
A remote code execution vulnerability exists in Cisco Prime Data Center Network Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco Patches 13 High-Severity Router and Switch Bugs
Cisco Systems released patches for 29 bugs Wednesday that addressed flaws in a wide range of its products including routers and switches running the IOS XE networking software. Thirteen of the vulnerabilities revealed are rated high severity. The bulk of the high-severity vulnerabilities are tied...
Cisco Data Center Network Manager - Unauthenticated Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Data Center Network Manager Unauthenticated Remote Code Execution', 'Description' = %q DCNM exposes a file upload servlet FileUploadServlet...
Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability
According to its self-reported version, Cisco Data Center Network Manager is affected by a vulnerability in the web-based management interface. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to...
CVE-2019-1620
creationtimestamp| type| source ---|---|--- 2019-06-27 10:42:33+00:00| seen| https://t.me/informationsecuritychannel/28840 2019-06-30 14:49:06+00:00| seen| https://t.me/CyberGovIL/511 2019-07-01 12:04:50+00:00| seen| https://t.me/CyberGovIL/513 2019-09-02 15:56:25+00:00| seen|...
CVE-2019-1620
Cisco Data Center Network Manager (DCNM) is affected by CVE-2019-1620: an unauthenticated attacker can upload arbitrary files via the web-based management interface due to improper permissions, enabling filesystem write access and root-level code execution. Public disclosures and exploits exist (...
Denial Of Service (DoS)
Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. A flaw was found in the way NSS handled...