PT-2024-10736 · Epson · Epson Expression Home Xp255

Name of the Vulnerable Software and Affected Versions: Epson Expression Home XP255 version 20.08.FM10I8 Description: An issue was discovered where POST requests do not require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. This allows for CSRF...

CVE-2024-51116

Tenda AC6 v2.0 V15.03.06.50 was discovered to contain a buffer overflow in the function 'formSetPPTPServer'...

CVE-2024-52020

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at wizfix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

NETGEAR XR300 安全漏洞

NETGEAR XR300 is a wireless router from NETGEAR. A security vulnerability exists in NETGEAR XR300 version v1.0.3.78, which stems from a buffer overflow vulnerability contained in the ssid parameter in the bridgewirelessmain.cgi component...

PT-2024-8276 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a command injection vulnerability in the wan gateway parameter at the "wiz fix2.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

CVE-2024-22733

TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker...

CVE-2024-33699

The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password...

CVE-2024-33700

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption...

CVE-2024-48826

Tenda AC7 v.15.03.06.44 ateiwprivset has pre-authentication command injection allowing remote attackers to execute arbitrary code...

PT-2024-7996 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 version 1.5.1.3 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command in the modifyrow function of the mainfunction.cgi file in the DrayTek Vigor 3900...

PT-2024-7403 · Ibm · Ibm Flexible Service Processor

Name of the Vulnerable Software and Affected Versions: IBM Flexible Service Processor FSP versions FW860.00 through FW860.B3 IBM Flexible Service Processor FSP versions FW950.00 through FW950.C0 IBM Flexible Service Processor FSP versions FW1030.00 through FW1030.61 IBM Flexible Service Processor...

CVE-2024-45259

An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By intercepting an HTTP request and changing the filename property in the download interface, any file on the device can be deleted...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2024-48644

Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera Firmware Version v3.0.0.188923031701 allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such...

CVE-2024-10123

A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compareparentcontroltime of the file /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be...

Tenda AC8 安全漏洞

Tenda AC8 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC8 version 16.03.34.06, which originates from a stack-based buffer overflow due to the parameter time in the function compareparentcontroltime in file /goform/saveParentControlInfo...

CVE-2024-48150

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub451208 function...

Plug n Play Camera com.starvedia.mCamView.zwave 安全漏洞

Plug n Play Camera com.starvedia.mCamView.zwave is a camera driver from Plug n Play. A security vulnerability exists in Plug n Play Camera com.starvedia.mCamView.zwave version 5.5.1. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update...

HPESBHF04719 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01073, Intel Xeon Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX4120 Gen11 - Prior to v2.2005-27-2024 HPE ProLiant DX560 Gen11 - Prior to v2.2005-27-2024 HPE ProLiant DX380 Gen11 - Prior to v2.2005-27-2024 HPE ProLiant DX380a...