Lucene search
+L

304 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/15 12:00 a.m.10 views

The vulnerability of the “set Diagnostics_Entry” function in D-Link DSL-3782 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the “set DiagnosticsEntry” function in D-Link DSL-3782 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.4AI score0.06755EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2024/06/06 12:23 p.m.16 views

CGA-766X-MPVM-3782

Bulletin has no description...

7.5CVSS8.3AI score0.91969EPSS
SaveExploits1
NVD
NVD
added 2024/04/15 2:15 p.m.14 views

CVE-2024-3782

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user...

8.8CVSS8.6AI score0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 2:04 p.m.15 views

CVE-2024-3782 Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user...

8.8CVSS6.7AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/15 2:04 p.m.26 views

CVE-2024-3782 Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user...

8.8CVSS8.7AI score0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 2:04 p.m.76 views

CVE-2024-3782

CVE-2024-3782 is a CSRF vulnerability in WBSAirback 21.02.04. The issue arises from an attacker creating a manipulated HTML form to trigger privileged actions when executed by a privileged user. The CVSS v3.1 vector indicates no user privileges required, network attack vector, and required user i...

8.8CVSS6.6AI score0.00259EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/02/28 12:00 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2023:1864-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.6CVSS6.9AI score0.003EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/10/10 3:15 a.m.7 views

CVE-2023-44959

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

8.8CVSS6.2AI score0.20525EPSS
SaveExploits1References2
OSV
OSV
added 2023/10/10 3:15 a.m.9 views

CVE-2023-44959

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

8.8CVSS6.1AI score0.20525EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/10/10 12:00 a.m.18 views

CVE-2023-44959

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

7.7AI score0.20525EPSS
SaveExploits1References1
CVE
CVE
added 2023/10/10 12:00 a.m.110 views

CVE-2023-44959

CVE-2023-44959 affects D-Link DSL-3782 (v1.03 and earlier). The vulnerability allows remote authenticated attackers to execute arbitrary code as root via the network settings page (Router IP Address field). Related materials in connected docs reference CVE-2023-27216 for the same device and show ...

8.8CVSS8.7AI score0.20525EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.17 views

D-Link DSL-3782 Command Injection Vulnerability

The D-Link DSL-3782 is a wireless router from China-based D-Link. A security vulnerability exists in the D-Link DSL-3782 v.1.03 and earlier versions that could allow a remotely authenticated attacker to execute arbitrary code as root via the Router IP Address field on the network settings page...

8.8CVSS7.6AI score0.20525EPSS
SaveExploits1References2
Circl
Circl
added 2023/09/14 10:24 p.m.11 views

CVE-2012-3782

creationtimestamp| type| source ---|---|--- 2023-09-14 22:24:48+00:00| seen| https://t.me/cibsecurity/70466...

4.8AI score
SaveExploits0References1
NVD
NVD
added 2023/09/14 7:15 p.m.11 views

CVE-2012-3782

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/07/19 8:57 p.m.20 views

CVE-2023-3782 DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response...

5.9CVSS6.8AI score0.00721EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/07/01 12:00 a.m.33 views

Amazon Linux 2 : wayland (ALAS-2023-2103)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2103 advisory. An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the...

6.6CVSS7.1AI score0.003EPSS
SaveExploits1References4
Amazon
Amazon
added 2023/06/27 12:00 a.m.24 views

Medium: wayland

Issue Overview: An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer...

6.6CVSS7.4AI score0.003EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/06/08 12:00 a.m.25 views

Amazon Linux 2023 : libwayland-client, libwayland-cursor, libwayland-egl (ALAS2023-2023-203)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-203 advisory. An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the...

6.6CVSS7.1AI score0.003EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:00 a.m.19 views

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router allows a hacker to execute arbitrary code.

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.3AI score0.02402EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:00 a.m.16 views

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router, related to the issue of writing operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.3AI score0.02727EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder