Lucene search
+L

450 matches found

OSV
OSV
added 2023/10/11 4:15 p.m.11 views

CVE-2023-27380

An OS command injection vulnerability exists in the admin.cgi USSDsend functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS7.3AI score0.05749EPSS
SaveExploits1References2
OSV
OSV
added 2023/10/11 4:15 p.m.11 views

CVE-2023-28381

An OS command injection vulnerability exists in the admin.cgi MVPNtrialinit functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS7.3AI score0.05913EPSS
SaveExploits1References2
CVE
CVE
added 2023/10/11 3:16 p.m.70 views

CVE-2023-27380

CVE-2023-27380 affects Peplink Surf SOHO HW1, specifically the admin.cgi USSD_send endpoint. A crafted authenticated HTTP POST to the GSM/USSD_send path can reach the vulnerable code and, due to an unchecked ussd_code parameter, construct and execute an OS command via root privileges (mdstatus an...

8.8CVSS8.8AI score0.05749EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/11 3:16 p.m.10 views

CVE-2023-27380

An OS command injection vulnerability exists in the admin.cgi USSDsend functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

7.2CVSS8.8AI score0.05749EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/10/11 3:16 p.m.48 views

CVE-2023-35194

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...

7.2CVSS9.1AI score0.05604EPSS
SaveExploits1References1
OSV
OSV
added 2023/03/21 6:15 p.m.14 views

CVE-2022-37337

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

8.8CVSS6AI score0.02828EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/15 10:15 p.m.36 views

CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

8.8CVSS8.6AI score0.01047EPSS
SaveExploits1References2
Prion
Prion
added 2023/03/15 10:15 p.m.33 views

Stack overflow

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

6.5CVSS8.5AI score0.01047EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/03/15 12:00 a.m.38 views

CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

8.8AI score0.01047EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/03/15 12:00 a.m.9 views

CVE-2023-25267

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 fixed in 10.0.0. There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI...

8.6AI score0.01047EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:37 a.m.15 views

SUSE CVE-2017-16340

An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c0e8 the value for the sdport key is copied using strcpy to the buffer at 0xa000180c. This buffer is 6 bytes large, sending anything longer will cause a buffer...

9.9CVSS7.1AI score0.0136EPSS
SaveExploits2References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:25 a.m.12 views

SUSE CVE-2018-14432

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all...

4.3CVSS6.8AI score0.01618EPSS
SaveExploits0References5
OSV
OSV
added 2023/01/11 10:15 p.m.13 views

CVE-2017-16331

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00853EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/11 10:15 p.m.10 views

CVE-2017-16332

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00673EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/11 10:15 p.m.12 views

CVE-2017-16328

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00853EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/11 10:15 p.m.9 views

CVE-2017-16334

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00673EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/11 10:15 p.m.10 views

CVE-2017-16336

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00673EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/11 10:15 p.m.30 views

CVE-2017-16328

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS9.5AI score0.00853EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/11 10:15 p.m.9 views

CVE-2017-16323

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00853EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/11 10:15 p.m.15 views

CVE-2017-16326

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS6.4AI score0.00853EPSS
SaveExploits1References1
Rows per page
Query Builder