Lucene search
+L

734 matches found

Cvelist
Cvelist
added 2024/05/07 10:55 p.m.63 views

CVE-2023-35749 D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS9.2AI score0.00605EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/07 10:55 p.m.14 views

CVE-2023-35748 D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit...

8.8CVSS9.1AI score0.00728EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.11 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 due to a stack-based buffer overflow remote code execution vulnerability in the DDP firmware upgrade file name. An attacker could exploit the vulnerabilit...

8.8CVSS8.5AI score0.00605EPSS
SaveExploits0References3
Exploit DB
Exploit DB
added 2024/05/04 12:00 a.m.346 views

Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Disclosure

Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.0.0 Revision 7304 1.0.0 Revision 7284 1.0.0 Revision 6505 1.0.0 Revision 6332 1.0.0 Revision 6258 XS2DAB v1.50 rev 6267 Summary: Cleber offers a...

5.3AI score
SaveExploits0
OSV
OSV
added 2024/05/03 2:15 a.m.8 views

CVE-2023-35747

D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.0108EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 1:58 a.m.22 views

CVE-2023-35747 D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS8.8AI score0.0108EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/03 1:58 a.m.68 views

CVE-2023-35746

CVE-2023-35746 affects the D-Link DAP-2622 DDP firmware. The flaw resides in the DDP service where insufficient validation of user-supplied data length leads to a stack-based buffer overflow, enabling remote code execution with root privileges. The attack is network-adjacent and requires no authe...

8.8CVSS9.1AI score0.0108EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/05/03 1:58 a.m.80 views

CVE-2023-35747

CVE-2023-35747 – D-Link DAP-2622 DDP vulnerability : The flaw is in the DDP service of the DAP-2622 routers, caused by improper validation of user-supplied data length before copying to a fixed-length stack-based buffer. This leads to a stack-based buffer overflow with the potential for Remote Co...

8.8CVSS9.1AI score0.0108EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.10 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China-based AUO D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP firmware upgrade validation password...

8.8CVSS9.3AI score0.0108EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/17 12:00 a.m.10 views

PT-2024-19426 · Hewlett Packard · Hpe Compute Scale-Up Server 3200

Name of the Vulnerable Software and Affected Versions: HPE Compute Scale-up Server 3200 versions prior to 1.10.342 Description: A potential security issue has been identified that could cause the disclosure of sensitive information in log files. Recommendations: For HPE Compute Scale-up Server 32...

6.8CVSS6.9AI score0.00429EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/15 12:00 a.m.13 views

PT-2024-19423 · Hewlett Packard · Hp Enterprise Officeconnect 1820

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise OfficeConnect 1820 Network switches versions prior to PT.02.19 Description: A potential security issue has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches, which could be remotely...

3.5CVSS7.4AI score0.00206EPSS
SaveExploits0References5
Lenovo
Lenovo
added 2024/04/09 5:11 p.m.7 views

AMI MegaRAC Vulnerability - Lenovo Support US

No description provided...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/02/28 5:47 a.m.109 views

Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot Threat

In a new joint advisory, cybersecurity and intelligence agencies from the U.S. and other countries are urging users of Ubiquiti EdgeRouter to take protective measures, weeks after a botnet comprising infected routers was felled by law enforcement as part of an operation codenamed Dying Ember. The...

9.8CVSS9.7AI score0.97408EPSS
SaveExploits19
Lenovo
Lenovo
added 2024/02/14 1:39 a.m.9 views

AMI MegaRAC Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
zdt
zdt
added 2024/01/16 12:00 a.m.447 views

Korenix JetNet Series Unauthenticated Access Exploit

------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Korenix JetNet Series vulnerable version| See "Vulnerable versions" fixed version| - CVE number| CVE-2023-5376, CVE-2023-5347 impact| High homepage| https://www.korenix.com/...

9.8CVSS7.1AI score0.01414EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2024/01/15 12:00 a.m.535 views

Korenix JetNet Series Unauthenticated Access

CyberDanube Security Research 20240109-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Korenix JetNet Series vulnerable version| See "Vulnerable versions" fixed version| - CVE number| CVE-2023-5376, CVE-2023-5347 impact|...

9.8CVSS7.4AI score0.01414EPSS
SaveExploits4
Lenovo
Lenovo
added 2024/01/10 3:42 a.m.6 views

AMI MegaRAC Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/01/09 9:54 a.m.9 views

CVE-2023-5347 Unauthenticated Firmware Upgrade

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01...

9.8CVSS9.5AI score0.01342EPSS
SaveExploits3References4
Cvelist
Cvelist
added 2024/01/09 9:54 a.m.60 views

CVE-2023-5347 Unauthenticated Firmware Upgrade

An Improper Verification of Cryptographic Signature vulnerability in the update process of Korenix JetNet Series allows replacing the whole operating system including Trusted Executables. This issue affects JetNet devices older than firmware version 2024/01...

9.8CVSS9.7AI score0.01342EPSS
SaveExploits3References4
OSV
OSV
added 2023/12/26 6:15 p.m.7 views

CVE-2023-51092

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function upgrade...

9.8CVSS5.9AI score0.12913EPSS
SaveExploits1References1
Rows per page
Query Builder