Lucene search
+L

133 matches found

BDU FSTEC
BDU FSTEC
•added 2024/12/23 12:00 a.m.•13 views

The vulnerability of the /sbin/httpd microprogramming system used in wireless access points DAP-2555 allows a attacker to cause a service failure.

The vulnerability of the /sbin/httpd microprogramming system used by D-Link DAP-2555 wireless access points is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted HTTP...

6.5CVSS5.7AI score0.0055EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2024/12/20 12:00 a.m.•17 views

D-Link DAP-2555 Denial of Service Vulnerability

The D-Link DAP-2555 is a wireless access point from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-2555 REVAFIRMWARE1.20 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

6.5CVSS6.6AI score0.0055EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/17 3:15 p.m.•29 views

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

6.5CVSS0.0055EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/17 3:15 p.m.•12 views

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

6.5CVSS5.8AI score0.0055EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/17 12:00 a.m.•16 views

D-Link DAP-2555 安全漏洞

The D-Link DAP-2555 is a wireless access point from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-2555 REVAFIRMWARE1.20 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

6.5CVSS6.6AI score0.0055EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/17 12:00 a.m.•94 views

CVE-2024-37607

The D-Link DAP-2555 wireless access point is vulnerable to a Buffer overflow vulnerability in the REVA_FIRMWARE_1.20 version. The flaw exists within the /sbin/httpd microprogramming system and can be triggered by sending a crafted HTTP request , potentially leading to a Denial of Service (DoS) or...

7.1AI score0.0055EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/17 12:00 a.m.•18 views

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

7.1AI score0.0055EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/17 12:00 a.m.•1 views

CVE-2024-37607: Buffer Copy without Checking Size of Input

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

6.5CVSS5.9AI score0.0055EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/17 12:00 a.m.•55 views

CVE-2024-37607

A Buffer overflow vulnerability in D-Link DAP-2555 REVAFIRMWARE1.20 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request...

0.0055EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/06/10 12:00 a.m.•25 views

PT-2024-9689 · D Link · D-Link Dap-2555

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2555 version REVA FIRMWARE 1.20 Description: A buffer overflow vulnerability in the D-Link DAP-2555 allows remote attackers to cause a Denial of Service DoS via a crafted HTTP request. The issue is related to the /sbin/httpd file a...

6.5CVSS7.5AI score0.0055EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/05/31 12:00 a.m.•28 views

Amazon Linux 2 : cni-plugins (ALAS-2024-2555)

The version of cni-plugins installed on the remote host is prior to 1.2.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2555 advisory. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATIO...

7.6AI score0.91969EPSS
SaveExploits1References4
CVE
CVE
•added 2024/03/17 6:31 a.m.•93 views

CVE-2024-2555

CVE-2024-2555 affects SourceCodester Employee Task Management System 1.0, with a vulnerability in the file update-admin.php. The manipulation of the argument admin_id can lead to an SQL injection, exploitable remotely, and the exploit has been disclosed publicly. Multiple sources describe the imp...

7.2CVSS6.8AI score0.00608EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/03/17 6:31 a.m.•56 views

CVE-2024-2555 SourceCodester Employee Task Management System update-admin.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7AI score0.00608EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/17 6:31 a.m.•23 views

CVE-2024-2555 SourceCodester Employee Task Management System update-admin.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.3AI score0.00608EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/06/09 5:33 a.m.•46 views

CVE-2023-2555 WPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Custom Drop-Down Currency Switcher Creation

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level...

4.3CVSS4.6AI score0.00434EPSS
SaveExploits0References2
CVE
CVE
•added 2023/06/09 5:33 a.m.•62 views

CVE-2023-2555

CVE-2023-2555 affects the WPCS – WordPress Currency Switcher Professional plugin for WordPress. The issue arises from a missing capability check on the create function in versions up to and including 1.1.9, enabling authenticated attackers with subscriber-level permissions and above to create a c...

4.3CVSS5.2AI score0.00434EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2022/10/12 12:00 a.m.•26 views

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2022-2555)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.35867EPSS
SaveExploits3References2
Circl
Circl
•added 2022/08/22 6:20 p.m.•12 views

CVE-2022-2555

creationtimestamp| type| source ---|---|--- 2022-08-22 18:20:36+00:00| seen| https://t.me/cibsecurity/48482...

6.5CVSS6.3AI score0.00428EPSS
SaveExploits1References1
OSV
OSV
•added 2022/08/22 3:15 p.m.•11 views

CVE-2022-2555

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack...

6.5CVSS5.8AI score0.00428EPSS
SaveExploits1References1
NVD
NVD
•added 2022/08/22 3:15 p.m.•25 views

CVE-2022-2555

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack...

6.5CVSS0.00428EPSS
SaveExploits1References1
Rows per page
Query Builder