Lucene search
+L

10244 matches found

CNNVD
CNNVD
•added 2024/09/16 12:00 a.m.•17 views

D-Link DIR-X4860 安全漏洞

The DIR-X4860 is a wireless router from China's AUO D-Link. A security vulnerability exists in the DIR-X4860 of AUO Electronic Devices Shanghai Co. An unauthorized remote attacker could exploit the vulnerability and be able to log in and execute operating system commands using hard-coded...

9.8CVSS7.1AI score0.01028EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/09/16 12:00 a.m.•23 views

D-Link DIR-X5460和D-Link DIR-X4860 安全漏洞

The D-Link DIR-X5460 and D-Link DIR-X4860 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-X5460 and D-Link DIR-X4860, which stems from a contained stack-based buffer overflow vulnerability that can be exploited by an unauthenticated, remote...

9.8CVSS8.4AI score0.0191EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/09/16 12:00 a.m.•35 views

D-Link DIR-X4860 安全漏洞

The D-Link DIR-X4860 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-X4860 that stems from the use of hard-coded credentials, which allows an attacker to force the telnet service to be enabled and log in using hard-coded credentials...

8.8CVSS6.8AI score0.00601EPSS
SaveExploits0References3
OSV
OSV
•added 2024/09/13 7:15 a.m.•12 views

UBUNTU-CVE-2024-46701

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

5.5CVSS5.7AI score0.00189EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2024/09/13 6:27 a.m.•20 views

CVE-2024-46701 libfs: fix infinite directory reads for offset dir

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

6.8AI score0.00189EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/13 6:27 a.m.•29 views

CVE-2024-46701 libfs: fix infinite directory reads for offset dir

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

6.3AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/09/13 12:00 a.m.•8 views

PT-2024-6866

Name of the Vulnerable Software and Affected Versions D-Link DIR-X4860 versions affected versions not specified D-Link DIR-X5460A1 versions affected versions not specified D-Link COVR-X1870 versions affected versions not specified Description The issue is related to the presence of hidden...

8.8CVSS0.00601EPSS
SaveExploits0References17
CNVD
CNVD
•added 2024/09/11 12:00 a.m.•19 views

D-Link DIR-823G Information Disclosure Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. The D-Link DIR-823G suffers from an information disclosure vulnerability that originates from allowing unauthorized configuratio...

7.5CVSS5.9AI score0.00628EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/09/09 12:00 a.m.•18 views

The vulnerability of D-Link DIR-846W router’s microprogramming software lies in the lack of measures to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary code.

The vulnerability of the D-Link DIR-846W router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the...

10CVSS6AI score0.02031EPSS
SaveExploits0References4
OSV
OSV
•added 2024/09/06 4:15 p.m.•19 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5CVSS5.8AI score0.00628EPSS
SaveExploits1References2
NVD
NVD
•added 2024/09/06 4:15 p.m.•33 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5CVSS0.00628EPSS
SaveExploits1References2
Veracode
Veracode
•added 2024/09/06 5:19 a.m.•24 views

Arbitrary Command Execution

push-dir is vulnerable to Arbitrary Command Execution. The vulnerability is due to the lack of validation for arguments provided in the "opt.branch" variable before being passed to the "git" command, allowing an attacker to inject arbitrary commands...

9.8CVSS6.8AI score0.02836EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/09/06 12:00 a.m.•20 views

D-Link DIR-823G 安全漏洞

D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B0520181207 version, which stems from an information disclosure vulnerability that allows unauthorized configuration file downloads, where the downloaded configuration fi...

7.5CVSS6.4AI score0.00628EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/09/06 12:00 a.m.•16 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5AI score0.00628EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2024/09/06 12:00 a.m.•19 views

The vulnerability of D-Link DIR-846W router’s microprogramming software lies in the lack of measures taken to neutralize special elements used in the operating system commands. This allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-846W router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially craft...

10CVSS6AI score0.01832EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/09/06 12:00 a.m.•18 views

The vulnerability of the D-Link DIR-846W router’s microprogramming software lies in the lack of measures taken to neutralize special elements used in the operating system commands. This allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-846W router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially craft...

10CVSS6.3AI score0.01971EPSS
SaveExploits0References5
CVE
CVE
•added 2024/09/06 12:00 a.m.•85 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to information disclosure: unauthorized downloads of configuration files that contain plaintext passwords. This remote (network) issue is documented across multiple sources (NVD/Red Hat/CNVD/CVE lists). No explicit patch/version is provided in the ...

7.5CVSS6.8AI score0.00628EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/09/06 12:00 a.m.•48 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

0.00628EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•4 views

CVE-2024-44408: Missing Authorization

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5CVSS7.2AI score0.00628EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•184 views

D-Link DIR 645 Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DIR 645 Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in DIR 645 'OSVDB', '90733' ,...

7.4AI score
SaveExploits0
Rows per page
Query Builder