Lucene search
K

15 matches found

EUVD
EUVD
added 2025/11/04 6:19 a.m.2 views

EUVD-2025-37563

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036...

4.7CVSS4.8AI score0.00011EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 4:49 a.m.4 views

CVE-2021-37563

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS Wi-Fi Protected Setup protocol. Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write...

9.3CVSS7AI score0.00549EPSS
Exploits0References1
NVD
NVD
added 2024/07/20 9:15 a.m.16 views

CVE-2024-37563

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TOCHAT.BE allows Stored XSS.This issue affects TOCHAT.BE: from n/a through 1.3.0...

6.5CVSS0.00121EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/20 9:4 a.m.16 views

CVE-2024-37563 WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TOCHAT.BE allows Stored XSS.This issue affects TOCHAT.BE: from n/a through 1.3.0...

6.5CVSS6.8AI score0.00121EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/20 9:4 a.m.20 views

CVE-2024-37563 WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TOCHAT.BE allows Stored XSS.This issue affects TOCHAT.BE: from n/a through 1.3.0...

6.5CVSS0.00121EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/07/09 12:0 a.m.6 views

WordPress TOCHAT.BE Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software TOCHAT.BE Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37563 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5f55251cd57c Credits Joshua Chan Required privilege...

6.5CVSS6.6AI score0.00121EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/07/13 7:42 a.m.1 views

CVE-2023-37563

creationtimestamp| type| source ---|---|--- 2023-07-13 07:42:21+00:00| seen| https://t.me/cibsecurity/66616...

6.5CVSS6.4AI score0.00132EPSS
Exploits0References1
NVD
NVD
added 2023/07/13 3:15 a.m.11 views

CVE-2023-37563

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S...

6.5CVSS0.00132EPSS
Exploits0References3
CVE
CVE
added 2023/07/13 2:59 a.m.36 views

CVE-2023-37563

CVE-2023-37563 affects ELECOM WRC-series wireless routers. Vulnerability enables a network-adjacent attacker to obtain sensitive information via an information-disclosure issue across multiple models/versions (e.g., WRC-1167GHBK-S v1.03-, WRC-1167GEBK-S v1.03-, WRC-1167FEBK-S v1.04-, WRC-F1167ACF...

6.5CVSS6.2AI score0.00132EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/13 2:59 a.m.16 views

CVE-2023-37563

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S...

6.3AI score0.00132EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/07/13 2:59 a.m.11 views

CVE-2023-37563

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtain sensitive information. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier, WRC-1167GEBK-S v1.03 and earlier, WRC-1167FEBK-S...

7AI score0.00132EPSS
Exploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/07/11 12:0 a.m.27 views

JVN#05223215: Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters

Wireless LAN routers and wireless LAN repeaters provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2023-37560 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

8.8CVSS8AI score0.00562EPSS
Exploits0
Circl
Circl
added 2021/12/26 2:22 a.m.1 views

CVE-2021-37563

creationtimestamp| type| source ---|---|--- 2021-12-26 02:22:20+00:00| seen| https://t.me/cibsecurity/34624...

9.3CVSS8.2AI score0.00549EPSS
Exploits0References1
NVD
NVD
added 2021/12/26 12:15 a.m.12 views

CVE-2021-37563

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS Wi-Fi Protected Setup protocol. Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write...

9.3CVSS0.00549EPSS
Exploits0References2
CVE
CVE
added 2021/12/25 11:25 p.m.52 views

CVE-2021-37563

CVE-2021-37563 affects MediaTek-based chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others). The vulnerability stems from mishandling of the WPS protocol, resulting in an out-of-bounds write. Affected software version: 7.4.0....

9.3CVSS8.7AI score0.00549EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder