Lucene search
K

23 matches found

NVD
NVD
added 2026/04/25 10:16 p.m.0 views

CVE-2026-7001

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public...

4.8CVSS0.0001EPSS
Exploits0References3
CVE
CVE
added 2026/04/25 9:15 p.m.4 views

CVE-2026-7001

Datacom DM4100, software version 1.3.6.1.4.1.3709, has a cross-site scripting vulnerability in the Ethernet Configuration Page triggered by manipulating the Name parameter. The issue can be exploited remotely and the exploit is publicly available. A vendor reply was not received according to sour...

4.8CVSS3.4AI score0.0001EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/25 9:15 p.m.1 views

CVE-2026-7001 Datacom DM4100 Ethernet Configuration cross site scripting

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public...

4.8CVSS3.4AI score0.0001EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/25 9:15 p.m.29 views

CVE-2026-7001 Datacom DM4100 Ethernet Configuration cross site scripting

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public...

4.8CVSS0.0001EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/25 9:15 p.m.1 views

EUVD-2026-25678

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public...

4.8CVSS3.4AI score0.0001EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/25 9:15 p.m.2 views

CVE-2026-7001

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public...

4.8CVSS3.4AI score0.0001EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/25 12:0 a.m.3 views

PT-2026-35176

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public...

4.8CVSS3.3AI score0.0001EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/25 12:0 a.m.4 views

Datacom DM4100 跨站脚本漏洞

The Datacom DM4100 is a high-performance routing and switching device designed for operational-level networks by Datacom Company in New Zealand. Version 1.3.6.1.4.1.3709 of the Datacom DM4100 contains a cross-site scripting vulnerability. This vulnerability stems from operations involving the Nam...

4.8CVSS5.6AI score0.0001EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/03 3:18 p.m.5 views

CVE-2022-50975

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled...

8.8CVSS5.6AI score0.00028EPSS
Exploits0References1
NVD
NVD
added 2026/02/02 3:16 p.m.3 views

CVE-2022-50975

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled...

8.8CVSS0.00028EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/02 2:7 p.m.3 views

EUVD-2022-55952

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled...

8.8CVSS5.6AI score0.00028EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/02 2:7 p.m.26 views

CVE-2022-50975 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled...

8.8CVSS0.00028EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/02 2:7 p.m.3 views

CVE-2022-50975 Multiple Innomic VibroLine VLX and avibia AVLX allow unauthenticated access to device configuration

An unauthenticated remote attacker is able to use an existing session id of a logged in user and gain full access to the device if configuration via ethernet is enabled...

8.8CVSS5.6AI score0.00028EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-1555

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00109EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 11:34 a.m.4 views

CVE-2025-0220

A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.1CVSS6AI score0.00109EPSS
Exploits0References1
NVD
NVD
added 2025/01/05 1:15 p.m.9 views

CVE-2025-0220

A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.1CVSS0.00109EPSS
Exploits0References4
CVE
CVE
added 2025/01/05 12:31 p.m.45 views

CVE-2025-0220

CVE-2025-0220 affects Trimble SPS851 v488.01 in the Ethernet Configuration Menu. The Hostname parameter manipulation triggers reflected cross-site scripting; remote exploitation is possible and the exploit has been disclosed publicly. Vendor response is noted as absent. Mitigation notes from PT-2...

5.1CVSS3.3AI score0.00109EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/01/05 12:31 p.m.5 views

CVE-2025-0220 Trimble SPS851 Ethernet Configuration Menu cross site scripting

A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.1CVSS6AI score0.00109EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/01/05 12:31 p.m.18 views

CVE-2025-0220 Trimble SPS851 Ethernet Configuration Menu cross site scripting

A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.1CVSS0.00109EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.1 views

PT-2025-3790 · Trimble · Trimble Sps851

Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue was found in the Ethernet Configuration Menu component of the affected software. The manipulation of the Hostname argument leads to cross-site scripting. It is possible to initiat...

5.1CVSS6.5AI score0.00109EPSS
Exploits0References9
Rows per page
Query Builder