Lucene search
+L

10428 matches found

Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.20 views

CVE-2023-50202 D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specif...

8.8CVSS8AI score0.00916EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.37 views

CVE-2023-50202 D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specif...

8.8CVSS9.3AI score0.00916EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.37 views

CVE-2023-50203 D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

8.8CVSS9.3AI score0.00946EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.76 views

CVE-2023-50201

D-Link G416: remote code execution via cfgsave upusb command injection in the HTTP service (port 80). Root context achieved by abusing insufficient validation of a user-supplied string to execute a system call. Affected product is the D-Link G416 router; attack vector is network-adjacent with no ...

8.8CVSS9.1AI score0.00916EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/05/03 2:14 a.m.66 views

CVE-2023-50200

CVE-2023-50200 corresponds to a D-Link G416 router vulnerability in the HTTP service (port 80) where the cfgsave backusb function fails to validate user input before executing a system call, enabling network-adjacent attackers to achieve remote code execution as root with no authentication. Multi...

8.8CVSS9.1AI score0.00916EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.18 views

CVE-2023-50200 D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...

8.8CVSS8AI score0.00916EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.44 views

CVE-2023-50200 D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...

8.8CVSS9.3AI score0.00916EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.28 views

CVE-2023-50198 D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exis...

8.8CVSS8AI score0.01187EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.38 views

CVE-2023-50198 D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exis...

8.8CVSS9.3AI score0.01187EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.74 views

CVE-2023-50199

Summary: CVE-2023-50199 affects D-Link G416 routers, due to a flaw in the httpd service listening on TCP port 80 that allows missing authentication to access a critical function, enabling remote code execution by network-adjacent attackers. The entry is supported by multiple sources (ZDI advisory...

8.8CVSS9.3AI score0.00696EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.26 views

CVE-2023-50199 D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability

D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The...

8.8CVSS9.6AI score0.00696EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 2:14 a.m.84 views

CVE-2023-50198

The CVE-2023-50198 issue affects the D-Link G416 wireless router. A command-injection vulnerability in the HTTP service (port 80) allows network-adjacent attackers to inject commands and execute code with root privileges due to insufficient validation of user-supplied input before a system call. ...

8.8CVSS9.1AI score0.01187EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.40 views

CVE-2023-50197 Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the...

7.8CVSS8AI score0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.18 views

CVE-2023-50196 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS7.5AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 2:14 a.m.73 views

CVE-2023-50196

Technical details (affected product/version, exploit specifics, and remediation) are not public in the provided documents. Monitor for updates from official advisories for CVE-2023-50196.

7.8CVSS8AI score0.00344EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.47 views

CVE-2023-50196 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS8.2AI score0.00344EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.19 views

CVE-2023-50195 Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.5AI score0.00399EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.15 views

CVE-2023-50194 Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.4AI score0.00399EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/03 2:14 a.m.67 views

CVE-2023-50195

CVE-2023-50195 concerns Trimble SketchUp Viewer, where the SKP file parsing is vulnerable to an out-of-bounds read that can enable remote code execution. The issue stems from improper validation of user-supplied data, potentially reading past the end of an allocated buffer. Exploitation requires ...

7.8CVSS8AI score0.00399EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:14 a.m.30 views

CVE-2023-50195 Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS8.2AI score0.00399EPSS
SaveExploits0References1
Rows per page
Query Builder