Lucene search
+L

3094 matches found

OSV
OSV
added 2022/01/21 9:15 a.m.8 views

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

7.8CVSS6.3AI score0.00269EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/21 9:15 a.m.17 views

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

7.8CVSS0.00269EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/21 9:15 a.m.16 views

Input validation

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

7.2CVSS7.8AI score0.00269EPSS
SaveExploits0References1Affected Software13
CVE
CVE
added 2022/01/21 9:05 a.m.70 views

CVE-2022-21933

CVE-2022-21933 affects ASUS VivoMini/Mini PC and describes an improper input validation vulnerability. A local attacker with system privileges can trigger a System Management Interrupt (SMI) to modify memory, resulting in arbitrary code execution and potential control or disruption of the system....

7.8CVSS7.3AI score0.00269EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/21 9:05 a.m.19 views

CVE-2022-21933 ASUS VivoMini/Mini PC - improper input validation

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

6.7CVSS8.1AI score0.00269EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/21 7:55 a.m.10 views

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

7.8CVSS7.6AI score0.00269EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/01/21 12:00 a.m.7 views

PT-2022-15190 · Asus · Asus Vivomini/Mini Pc

Name of the Vulnerable Software and Affected Versions: ASUS VivoMini/Mini PC affected versions not specified Description: The issue is related to an improper input validation vulnerability. A local attacker with system privilege can exploit this by using system management interrupt SMI to modify...

7.8CVSS7.6AI score0.00269EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/21 12:00 a.m.8 views

ASUS VivoMini/Mini PC 缓冲区错误漏洞

The ASUS VivoMini/Mini PC is an ultra-thin compact mini PC from ASUS of Taiwan, China. The ASUS VivoMini/Mini PC suffers from an input validation error vulnerability that originates from a local attacker with system privileges who can modify the memory using a System Management Interrupt SMI, whi...

7.8CVSS6.2AI score0.00269EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/01/17 12:00 a.m.63 views

ASUS RT-AX56U Path Traversal Vulnerability

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A path traversal vulnerability exists in ASUS RT-AX56U, which stems from the insufficient filtering of special characters in URL parameters by the login function of ASUS RT-AX56U, which could be exploited by an unauthenticated LAN attacke...

6.5CVSS4.5AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/14 5:15 a.m.7 views

CVE-2022-22054

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/14 5:15 a.m.32 views

CVE-2022-22054

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

6.5CVSS0.00452EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/14 5:15 a.m.19 views

Path traversal

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

3.3CVSS6.5AI score0.00452EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/14 4:50 a.m.44 views

CVE-2022-22054 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

6.5CVSS6.7AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/14 4:50 a.m.89 views

CVE-2022-22054

CVE-2022-22054 affects ASUS RT-AX56U. The login function allows path traversal due to inadequate filtering of special characters in URL parameters. An unauthenticated LAN attacker can access restricted system paths and download arbitrary files. Root cause and impact are described in multiple sour...

6.5CVSS6.5AI score0.00452EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/14 4:35 a.m.11 views

CVE-2022-22054

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

6.5CVSS6.7AI score0.00452EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/01/14 12:00 a.m.12 views

ASUS RT-AX56U 路径遍历漏洞

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A path traversal vulnerability exists in ASUS RT-AX56U, which stems from the insufficient filtering of special characters in URL parameters by the login function of ASUS RT-AX56U, which could be exploited by an unauthenticated LAN attacke...

6.5CVSS5.8AI score0.00452EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/01/05 12:00 a.m.44 views

ASUS RT-AX56U has unspecified vulnerabilities

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A security vulnerability exists in the ASUS RT-AX56U Wi-Fi router, which stems from incorrect validation of the length of the httpd parameter. An attacker could use the vulnerability to initiate arbitrary code execution to control the...

8CVSS2.4AI score0.00677EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/05 12:00 a.m.41 views

ASUS RT-AC52U_B1 Cross-Site Scripting Vulnerability

Asus Rt-Ac52UB1 is a dual-band wireless router from Asus China.A cross-site scripting vulnerability exists in ASUS RT-AC52UB1, which stems from the presence of invalid data filtering in ASUS RT-AC52U B1 version 3.0.0.4.380.10931, which could lead to user session hijacking. No detailed vulnerabili...

6.1CVSS1.5AI score0.00702EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/03 3:15 p.m.7 views

CVE-2021-46109

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

6.1CVSS6.3AI score0.00702EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/03 3:15 p.m.7 views

CVE-2021-46109

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

6.1CVSS6.3AI score0.00702EPSS
SaveExploits1References1
Rows per page
Query Builder