Lucene search
+L

722 matches found

CVE
CVE
added 2024/05/16 6:00 a.m.68 views

CVE-2024-4961

CVE-2024-4961 affects D-Link DAR-7000-40 (V31R02B1413C). The vulnerability concerns an unspecified functionality in /user/onlineuser.php where manipulating the file_upload parameter enables unrestricted file upload, with remote exploitation possible. Multiple sources corroborate that the affected...

9.8CVSS6.9AI score0.02311EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/05/16 6:00 a.m.32 views

CVE-2024-4961 D-Link DAR-7000-40 onlineuser.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be...

6.5CVSS6.7AI score0.02311EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/05/16 6:00 a.m.11 views

CVE-2024-4961 D-Link DAR-7000-40 onlineuser.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be...

6.5CVSS6.9AI score0.02311EPSS
SaveExploits0References5
CVE
CVE
added 2024/05/16 5:31 a.m.67 views

CVE-2024-4960

The CVE-2024-4960 entry concerns the D-Link DAR-7000-40 (V31R02B1413C). Affected is the licenseauthorization.php script in interface/sysmanage, where manipulation of the file_upload argument enables unrestricted file upload. The vulnerability allows remote exploitation and could lead to arbitrary...

9.8CVSS6.9AI score0.02311EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/05/16 5:31 a.m.32 views

CVE-2024-4960 D-Link DAR-7000-40 licenseauthorization.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

6.5CVSS6.7AI score0.02311EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/05/16 5:31 a.m.22 views

CVE-2024-4960 D-Link DAR-7000-40 licenseauthorization.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

6.5CVSS6.9AI score0.02311EPSS
SaveExploits0References5
CNVD
CNVD
added 2024/05/16 12:00 a.m.13 views

D-Link DAR-7000-40 Command Execution Vulnerability

The D-Link DAR-7000-40 is an Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-7000-40 suffers from a command execution vulnerability, which is caused by incorrect validation of file extensions in the interface/sysmanage/license authorization.php script. An attacker can exploi...

9.8CVSS7.7AI score0.02311EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.15 views

D-Link DAR-7000 代码问题漏洞

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China Youxun D-Link. A code issue vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from the fact that incorrect operation of the parameter file can lead to unrestricted uploads...

9.8CVSS6.7AI score0.02469EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.9 views

D-Link DAR-7000 操作系统命令注入漏洞

DAR-7000-40 is a network device suitable for multiple fields such as government, finance, insurance, hotels, small and medium-sized enterprises, and education industry. It provides professional traffic management capabilities, powerful content auditing, advanced Internet behavior management and...

9.8CVSS7.5AI score0.02853EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.12 views

D-Link DAR-7000 安全漏洞

D-Link DAR-7000 is an Internet behavior auditing gateway from China Youxun D-Link. A security vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter file can lead to unrestricted uploads...

9.8CVSS6.5AI score0.02469EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.8 views

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000-40 is an Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-7000-40 suffers from a command execution vulnerability, which is caused by incorrect validation of file extensions in the interface/sysmanage/license authorization.php script. An attacker can exploi...

9.8CVSS8AI score0.02311EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.11 views

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter fileupload that can result in an unrestricted upload...

9.8CVSS6.7AI score0.03001EPSS
SaveExploits0References6
CNVD
CNVD
added 2024/05/16 12:00 a.m.19 views

D-Link DAR-7000-40 resmanage.php Command Injection Vulnerability

DAR-7000-40 is a network device suitable for multiple fields such as government, finance, insurance, hotels, small and medium-sized enterprises, and education industry. It provides professional traffic management capabilities, powerful content auditing, advanced Internet behavior management and...

9.8CVSS7.7AI score0.02853EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.11 views

PT-2024-3652 · D Link · D-Link Dar-7000-40

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C Description: A critical vulnerability has been found in the D-Link DAR-7000-40, affecting an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument...

9.8CVSS6.7AI score0.02311EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.11 views

PT-2024-3695 · D Link · D-Link Dar-7000-40

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C Description: A critical issue has been found in the file /useratte/resmanage.php, allowing for unrestricted upload through the manipulation of the file argument. This can be exploited remotely,...

9.8CVSS7AI score0.02469EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.16 views

PT-2024-3697 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions prior to the latest supported version D-Link DAR-8000 versions prior to the latest supported version Description: The issue is related to an unrestricted file upload vulnerability in the /firewall/urlblist.php file of...

9.8CVSS6.8AI score0.02469EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.10 views

PT-2024-3651 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical vulnerability was found in the D-Link DAR-7000 and DAR-8000 routers, affecting an...

9.8CVSS6.4AI score0.02311EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/05/15 12:00 a.m.8 views

PT-2024-3696 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical issue affects an unknown part of the file /url/url.php, allowing for unrestricted...

9.8CVSS6.8AI score0.03001EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2024/04/10 5:15 p.m.7 views

CVE-2024-3385

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the...

7.5CVSS7.1AI score0.00909EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/04/10 5:15 p.m.8 views

CVE-2024-3385

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the...

7.5CVSS7.1AI score0.00909EPSS
SaveExploits0References1
Rows per page
Query Builder