Lucene search
+L

345 matches found

CNNVD
CNNVD
added 2022/04/07 12:0 a.m.9 views

ASUS RT-AX56U 路径遍历漏洞

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatePLC/PORT file, which can be exploited by an attacker to overwrite system files by uploading another PLC/PORT file with the same filename, resulting in a service...

8.1CVSS5.6AI score0.00472EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/03/23 12:0 a.m.6 views

ASUS AC68U 安全漏洞

The ASUS AC68U is a router from the Chinese company ASUS. A buffer overflow vulnerability exists in ASUS AC68U 3.0.0.4.385.20852 and prior versions, which stems from a failure to properly validate data boundaries when performing an operation in memory in blocking.cgi, which can be exploited by an...

7.8CVSS6AI score0.01057EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/03/07 1:44 a.m.3 views

CVE-2022-25597

ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service...

8.8CVSS5.9AI score0.00842EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/02 1:33 a.m.5 views

CVE-2022-23973

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service...

8.8CVSS6.4AI score0.00554EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/02 1:33 a.m.4 views

CVE-2022-23970

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

8.1CVSS5.5AI score0.00472EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/02 1:33 a.m.4 views

CVE-2022-23971

ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...

8.1CVSS5.5AI score0.00472EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/02 1:33 a.m.6 views

CVE-2022-23972

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database...

8.8CVSS6AI score0.0052EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/14 5:15 a.m.6 views

CVE-2022-22054

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/14 12:0 a.m.10 views

ASUS RT-AX56U 路径遍历漏洞

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A path traversal vulnerability exists in ASUS RT-AX56U, which stems from the insufficient filtering of special characters in URL parameters by the login function of ASUS RT-AX56U, which could be exploited by an unauthenticated LAN attacke...

6.5CVSS5.8AI score0.00452EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/03 3:15 p.m.4 views

CVE-2021-46109

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

6.1CVSS6.3AI score0.00702EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/03 3:15 p.m.6 views

CVE-2021-46109

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

6.1CVSS6.3AI score0.00702EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/03 8:18 a.m.5 views

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

8CVSS8.1AI score0.00677EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/01/03 12:0 a.m.9 views

PT-2022-12005 · Asus · Asus Rt-Ax56U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U Wi-Fi Router affected versions not specified Description: The issue is related to a stack-based buffer overflow due to improper validation for httpd parameter length. This allows an authenticated local area network attacker to...

8CVSS7.9AI score0.00677EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/03 12:0 a.m.10 views

Asus Rt-Ac52U_B1 跨站脚本漏洞

Asus Rt-Ac52UB1 is a dual-band wireless router from Asus China.A cross-site scripting vulnerability exists in ASUS RT-AC52UB1, which stems from the presence of invalid data filtering in ASUS RT-AC52U B1 version 3.0.0.4.380.10931, which could lead to user session hijacking. No detailed vulnerabili...

6.1CVSS5.2AI score0.00702EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/28 12:0 a.m.8 views

ASUS RT-N53 安全漏洞

ASUS RT-N53 is a driver application from ASUS Taiwan, China.A security vulnerability exists in the ASUS RT-N53 3.0.0.4.376.3754 firmware, which can be exploited by attackers to perform buffer overflow attacks...

9.8CVSS5.9AI score0.02038EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/19 12:0 a.m.7 views

ASUS routers 安全漏洞

ASUS routers is a router app from ASUS of Taiwan, China. A security vulnerability exists in ASUS routers that stems from a problem with the router firmware's limit on the number of login attempts, which allows remote attackers to attempt an arbitrary number of login attempts by sending a specific...

10CVSS8.5AI score0.05994EPSS
SaveExploits0References9
NVD
NVD
added 2021/02/01 2:15 p.m.28 views

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

9.8CVSS9.9AI score0.04207EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.10 views

ASUS RT-AX86U 安全漏洞

ASUS RT-AX86U is a wireless router from ASUS China. ASUS RT-AX86U router firmware is vulnerable to a buffer overflow in the blocking request.cgi function of the httpd module, which could be exploited by an attacker to construct malicious data leading to code execution...

9.8CVSS7.6AI score0.04207EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/01/18 12:0 a.m.7 views

PT-2021-7656 · Asus · Asus Rt-Ac68U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634 Description: The issue is related to a SQL injection vulnerability in the Cloud Disk feature of the ASUS RT-AC68U router firmware. This vulnerability allows remote attackers to...

7.8CVSS7.5AI score0.01EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/01/18 12:0 a.m.8 views

ASUS DSL-N14U-B1 代码问题漏洞

ASUS DSL-N14U-B1 is a router device from ASUS China. ASUS DSL-N14U-B1 1.1.2.3805 devices is vulnerable and can be exploited by attackers to upload arbitrary file content as a firmware update...

7.5CVSS7.2AI score0.02879EPSS
SaveExploits1References3
Rows per page
Query Builder