Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.7 views

CVE-2020-36178

oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...

10CVSS7.6AI score0.13608EPSS
Exploits1
NVD
NVD
added 2024/06/13 8:16 a.m.21 views

CVE-2024-36178

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS0.024EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/13 7:52 a.m.17 views

CVE-2024-36178 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS0.024EPSS
Exploits0References1
Circl
Circl
added 2021/10/06 2:37 p.m.1 views

CVE-2021-36178

creationtimestamp| type| source ---|---|--- 2021-10-06 14:37:54+00:00| seen| https://t.me/cibsecurity/30032...

6.5CVSS6.3AI score0.00253EPSS
Exploits0References1
CVE
CVE
added 2021/10/06 9:18 a.m.41 views

CVE-2021-36178

CVE-2021-36178 affects Fortinet FortiSDNConnector (versions 1.1.7 and earlier). The root cause is insufficient protection of credentials, enabling an attacker with low privileges and network access to disclose third‑party device credentials by performing a configuration page lookup in the WebUI. ...

6.5CVSS6.3AI score0.00253EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/01/07 12:39 a.m.2 views

CVE-2020-36178

creationtimestamp| type| source ---|---|--- 2021-01-07 00:39:41+00:00| seen| https://t.me/cibsecurity/21723 2021-01-09 12:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2459...

10CVSS8.7AI score0.13608EPSS
Exploits1References2
NVD
NVD
added 2021/01/06 9:15 p.m.13 views

CVE-2020-36178

oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...

10CVSS9.8AI score0.13608EPSS
Exploits1References3
CVE
CVE
added 2021/01/06 8:57 p.m.71 views

CVE-2020-36178

Summary of CVE-2020-36178 : The vulnerability affects TP-Link TL-WR840N devices running 6_EU_0.9.1_4.16 firmware. The issue is caused by the function oal_ipt_addBridgeIsolationRules, where a raw string entered via the web interface (an IP address field) is used directly as input to a system call ...

10CVSS9.7AI score0.13608EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder