Lucene search
+L

9825 matches found

BDU FSTEC
BDU FSTEC
•added 2022/06/07 12:00 a.m.•19 views

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software lies in the lack of measures to neutralize specific elements within it. This allows attackers to execute arbitrary commands or trigger service failures.

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause...

8.8CVSS7.9AI score0.01549EPSS
SaveExploits0References3Affected Software1
Openbugbounty
Openbugbounty
•added 2022/06/06 10:02 p.m.•10 views

dir-shop.cz Cross Site Scripting vulnerability OBB-2639344

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
•added 2022/06/03 9:15 p.m.•14 views

CVE-2022-29778

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php...

8.8CVSS6.9AI score0.02707EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/03 9:15 p.m.•36 views

CVE-2022-29778

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php...

8.8CVSS0.02707EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/03 9:15 p.m.•8 views

CVE-2022-29778

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php...

8.8CVSS7.2AI score0.02707EPSS
SaveExploits1References3
CVE
CVE
•added 2022/06/03 8:19 p.m.•121 views

CVE-2022-29778

The vulnerability CVE-2022-29778 affects D-Link DIR-890L (firmware 1.20b01). The issue arises from a hardcoded Wake-On-Lan option for the descriptor parameter in SetVirtualServerSettings.php, enabling an attacker to execute arbitrary code. Concrete impact is high (remote code execution) with netw...

8.8CVSS8.9AI score0.02707EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/03 8:19 p.m.•18 views

CVE-2022-29778

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php...

7.9AI score0.02707EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/06/03 8:19 p.m.•68 views

CVE-2022-29778

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php...

9.2AI score0.02707EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/03 12:00 a.m.•19 views

PT-2022-19827 · D Link · D-Link Dir-890L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L version 1.20b01 Description: The issue allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter descriptor at the API endpoint "SetVirtualServerSettings.php". Recommendations: For...

8.8CVSS7.2AI score0.02707EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/03 12:00 a.m.•4 views

CVE-2022-29778: Use of Hard-coded Credentials

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php...

8.8CVSS7.7AI score0.02707EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/03 12:00 a.m.•14 views

D-Link DIR-890L 安全漏洞

D-Link DIR-890L is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-890L version 1.20b01. An attacker could exploit the vulnerability to execute arbitrary code...

8.8CVSS7.6AI score0.02707EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•7 views

CVE-2022-30521

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters...

10CVSS7.2AI score0.15122EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•15 views

D-Link DIR-890L 缓冲区错误漏洞

The D-Link DIR-890L is a wireless router. A binary vulnerability exists in the D-Link DIR-890L, which can be exploited by an attacker to gain control of the server...

10CVSS5.6AI score0.15122EPSS
SaveExploits1References4
OPENSUSE Linux
OPENSUSE Linux
•added 2022/05/31 12:00 a.m.•41 views

Security update for pcmanfm (moderate)

openSUSE Security Update: Security update for pcmanfm Announcement ID: openSUSE-SU-2022:10001-1 Rating: moderate References: 1039140 Cross-References: CVE-2017-8934 CVSS scores: CVE-2017-8934 NVD : 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 A...

5.5CVSS6.4AI score0.00334EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/30 12:00 a.m.•22 views

Binary Vulnerability in D-Link DIR-890L

The D-Link DIR-890L is a wireless router. A binary vulnerability exists in the D-Link DIR-890L, which can be exploited by an attacker to gain control of the server...

10CVSS7AI score0.15122EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/05/27 12:00 a.m.•11 views

PT-2022-3311 · D Link · D-Link Dir-890L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L versions prior to DIR890LA1 FW107b09.bin Description: The issue is related to a stack-based buffer overflow vulnerability in the LAN-side Web-Configuration Interface of the D-Link Wi-Fi router firmware. This vulnerability is...

10CVSS8.5AI score0.15122EPSS
SaveExploits1References6
Openbugbounty
Openbugbounty
•added 2022/05/25 7:52 p.m.•10 views

dir-shop.cz Cross Site Scripting vulnerability OBB-2627792

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2022/05/24 12:00 a.m.•68 views

D-Link DIR-825 OS Command Injection (CVE-2021-46441; CVE-2021-46442)

A command injection vulnerability exists in D-Link DIR-825. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

9CVSS5.6AI score0.5606EPSS
SaveExploits2
CNVD
CNVD
•added 2022/05/19 12:00 a.m.•38 views

D-LINK DIR-825 AC1200 R2 Directory Traversal Vulnerability

The D-LINK DIR-825 AC1200 R2 is a router from China-based AUO D-LINK. The D-LINK DIR-825 AC1200 R2 suffers from a directory traversal vulnerability that stems from a lack of validity checking of paths when processing directory requests, which can be exploited by an attacker to access the entire...

6.5CVSS7AI score0.0143EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/17 2:15 p.m.•30 views

CVE-2022-29332

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server...

6.5CVSS0.0143EPSS
SaveExploits1References1
Rows per page
Query Builder