Lucene search
+L

140 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:26 a.m.22 views

CVE-2023-44018

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the domain parameter in the addwhitenode function...

9.8CVSS7.9AI score0.15417EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:52 p.m.15 views

CVE-2021-43459

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the 1 domain and 2 path parameters...

5.4CVSS6AI score0.00574EPSS
SaveExploits1
SUSE CVE
SUSE CVE
added 2025/05/22 1:40 a.m.5 views

SUSE CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

4.3CVSS6.8AI score0.00358EPSS
SaveExploits1References11
OSV
OSV
added 2025/05/16 6:16 p.m.2 views

DEBIAN-CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

4.3CVSS5.5AI score0.00358EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2025/05/16 6:16 p.m.5 views

CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

4.3CVSS6.1AI score0.00358EPSS
SaveExploits1References4
OSV
OSV
added 2025/05/16 6:16 p.m.6 views

UBUNTU-CVE-2025-4476

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 Unauthorized HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed...

4.3CVSS7AI score0.00358EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.11 views

TOTOLINK A950RG和TOTOLINK A810R 安全漏洞

TOTOLINK A950RG and TOTOLINK A810R are both products of China's Gion Electronics TOTOLINK.TOTOLINK A950RG is a super-generation Giga wireless router.TOTOLINK A810R is a wireless dual-band router. A command execution vulnerability exists in the TOTOLINK A950RG and TOTOLINK A810R, which stems from...

9.8CVSS7.6AI score0.01094EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.7 views

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianhuox FoxCMS company. A security vulnerability exists in FoxCMS 1.25 and earlier versions, which stems from insufficient filtering of the urlprefix, domain and mywebsite parameters in the installdb.php file, which may...

7.2CVSS7.7AI score0.00372EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.7 views

The vulnerability of the formModifyDnsForward() function in Tenda W15E router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formModifyDnsForward function in the Tenda W15E router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the DNSDomainName parameter. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.4AI score0.0102EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/02/06 10:16 p.m.8 views

CVE-2023-40143

An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter...

5.4CVSS5.8AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/06 12:0 a.m.9 views

Westermo Lynx 206-F2G Cross-Site Scripting Vulnerability

The Westermo Lynx 206-F2G is a Layer 3 industrial Ethernet switch from Westermo, Sweden, powered by the Westermo WeOS network operating system. A security vulnerability exists in the Westermo Lynx 206-F2G. The vulnerability can be exploited to introduce arbitrary JavaScript by injecting a...

5.4CVSS6.2AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/06 12:0 a.m.12 views

PT-2024-12856 · Westermo · Westermo Lynx

Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: An attacker with access to the Westermo Lynx web application could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the forward.0.domain parameter...

5.4CVSS5.2AI score0.00294EPSS
SaveExploits0References5
CNVD
CNVD
added 2023/09/28 12:0 a.m.8 views

Tenda AC10U add_white_node function stack buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow vulnerabili...

9.8CVSS9.5AI score0.15417EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/27 3:19 p.m.12 views

CVE-2023-44018

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the domain parameter in the addwhitenode function...

9.8CVSS5.9AI score0.15417EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/27 3:19 p.m.7 views

CVE-2023-44018

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the domain parameter in the addwhitenode function...

9.8CVSS5.9AI score0.15417EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/27 3:19 p.m.23 views

Stack overflow

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the domain parameter in the addwhitenode function...

7.5CVSS9.6AI score0.15417EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/27 12:0 a.m.10 views

Tenda AC10 缓冲区错误漏洞

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow vulnerabili...

9.8CVSS7.4AI score0.15417EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/27 12:0 a.m.8 views

PT-2023-29070 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 1.0 US AC10UV1.0RTL V15.03.06.49 multi TDE01 Description: A stack overflow issue was discovered via the domain parameter in the add white node function. This issue can be exploited, potentially leading to security breaches...

9.8CVSS7.4AI score0.15417EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/17 2:43 a.m.11 views

GHSA-JJ4J-CWGQ-FX7G ViMbAdmin Cross-site Scripting Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 transport parameter to domain/add; the 3 name parameter to mailbox/add/did/; the 4 goto parameter to alias/add/did/; or the 5 captchatext...

5.4CVSS5.7AI score0.01012EPSS
SaveExploits2References4
NVD
NVD
added 2022/04/04 4:15 p.m.28 views

CVE-2021-43459

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the 1 domain and 2 path parameters...

5.4CVSS0.00574EPSS
SaveExploits1References1
Rows per page
Query Builder