4404 matches found
CVE-2021-20038
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's modcgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware...
Buffer overflow
Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...
CVE-2021-33271
D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...
CVE-2021-33268
D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request...
CVE-2021-33267
D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request...
D-Link DIR-809 缓冲区错误漏洞
D-Link DIR-809 is a dual-band router from D-Link, China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c in the product formSetPortTr function fails to effectively determine data boundaries. An attacker coul...
Qnap Qvr 授权问题漏洞
Qnap Qvr is a Qnap monitoring system control center from China Weilian Technology Qnap. An authorization issue vulnerability exists in the QNAP appliance VioStor, which allows an attacker to compromise the security of the system. We have fixed this vulnerability in the following QVR versions: QVR...
CVE-2021-36321
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service...
Intel Ethernet Controllers 安全漏洞
Intel Ethernet Controllers is an Ethernet controller from Intel Corporation. A security vulnerability in Intel Ethernet Controllers, which stems from improper access control in IntelR Ethernet firmware prior to version 1.5.5.6 of the Network Controller E810, may allow privileged users to...
Intel® Ethernet Advisory
Summary: Potential security vulnerabilities in firmware for some Intel® Ethernet controllers may allow denial of service or escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0200 Description:...
CVE-2021-37471
Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...
CVE-2021-36322
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections...
HPESBHF04199 rev.1 - HPE Superdome Flex Server, Remote Cross Site scripting (XSS) vulnerability
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server - Prior to Version 3.40.106 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26589 |...
ASUSTek ZenBook Pro Due 15 UX582 安全漏洞
ASUSTek ZenBook Pro Due 15 UX582 is a laptop computer from Asus Taiwan, China. The ASUSTek ZenBook Pro Due 15 UX582 suffers from a security vulnerability that stems from the ASUSTek ZenBook Pro Due 15 UX582 laptop firmware up to version 203 has insecure privileges that allow physically proximate...
CVE-2021-20121
The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...
CVE-2021-20122
The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass...
CVE-2021-20121
The Telus Wi-Fi Hub PRV65B444A-S-TS with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and...
Telus Wi-Fi Hub 安全漏洞
The Telus Wi-Fi Hub is a WiFi hub from Telus Canada. A security vulnerability exists in the Telus Wi-Fi Hub that stems from Telus Wi-Fi hubs with firmware version 3.00.20 PRV65B444A-S-TS are susceptible to an authenticated arbitrary file read attack. An authenticated user with physical access to...
CVE-2021-20600
Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...
AXIS OS 5.51 < 5.51.7.5 / 6.0 < 6.50.5.5 / 7.0 < 8.40.4.3 / 9.0 < 9.80.3.5 / 10.0 < 10.8 Multiple Vulnerabilities
The firmware version running on the remote host is vulnerable to multiple vulnerabilities, including the following: - User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. CVE-2021-31986 - A...