4398 matches found
Zyxel VPN2S 路径遍历漏洞
Zyxel Vpn2S is a reliable and secure Vpn router from China's Heqin Technology Zyxel. A security vulnerability exists in the web server of the Zyxel VPN2S firmware version 1.12, which could allow remote attackers to access sensitive information...
Edgecore ECS2020 命令注入漏洞
The Edgecore ECS2020 is a network smart switch solution from Edgecore China. A security vulnerability exists in the Edgecore ECS2020 version 1.0.0.0 firmware that originates from allowing unauthenticated commands to be injected into the /EXCUSHELL URI via the command1 HTTP header...
JVN#42866574: Multiple vulnerabilities in Sharp NEC Display Solutions' public displays
Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain multiple vulnerabilities listed below. Command Injection CWE-77 - CVE-2021-20698 Version| Vector| Score ---|---|--- CVSS v2| AV:N/AC:L/Au:N/C:C/I:C/A:C| Base Score:10.0 CVSS v3|...
Digi PortServer TS 16
1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Digi International, Inc. Equipment: PortServer TS 16 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability allows write access, which grants control of...
Western Digital My Cloud Multiple Products 5.0 < 5.17.107 OpenSSL Vulnerabilities (WDC-21011)
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities in OpenSSL. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
CVE-2021-34344
A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...
Critical Auth Bypass Bug Affect NETGEAR Smart Switches — Patch and PoC Released
Networking, storage and security solutions provider Netgear on Friday issued patches to address three security vulnerabilities affecting its smart switches that could be abused by an adversary to gain full control of a vulnerable device. The flaws, which were discovered and reported to Netgear by...
CVE-2021-34578
This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07...
CVE-2020-15744
Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420 firmware version 1.2.2 and prior versions...
Victure PC420 缓冲区错误漏洞
Victure PC420 is a web-based smart camera. Victure PC420 Smart Camera A security vulnerability exists in firmware version 1.2.2 and earlier versions, which originates from a stack-based buffer overflow vulnerability in the ONVIF server component of the Victure PC420 Smart Camera, which can be...
D-Link DVG-3104MS 信任管理问题漏洞
A security vulnerability exists in D-Link DVG-3104MS, a gateway from D-Link, Taiwan, China, due to the fact that D-Link DVG-3104MS versions 1.0.2.0.3, 1.0.2.0.4 and 1.0.2.0.4E contain " /etc/passwd" file that does not record hard-coded credentials for user accounts. An attacker could exploit this...
NetGear D1500 1.0.0.21_1.0.1PE Cross Site Scripting
Exploit Title: NetGear D1500 V1.0.0.211.0.1PE - 'Wireless Repeater' Stored Cross-Site Scripting XSS Date: 21 Dec 2018 Exploit Author: Securityium Vendor Homepage: https://www.netgear.com/ Version: V1.0.0.211.0.1PE Tested on: NetGear D1500 Home Router Contact: [email protected] Version :...
D-Link DSL-2750U 操作系统命令注入漏洞
The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router. an OS command injection vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could exploit this vulnerability in combination with other vulnerabilities to execute arbitrary OS commands...
CVE-2021-38538
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, R9000 before 1.0.4.26, RAX120 before 1.0.0.78, RBK20 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30,...
CVE-2021-38527
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.14, EX6100v2 before 1.0.1.98, EX6150v2 before 1.0.1.98, EX6250 before 1.0.0.132, EX6400 before 1.0.2.158, EX6400v2 before 1.0.0.132, EX6410 before 1.0.0.132, EX6420 before...
CVE-2021-28841
Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to applycgi via an action pingtest without a pingipaddr key...
NETGEAR R6400 缓冲区错误漏洞
The Netgear NETGEAR R6400 is a wireless router from Netgear, Inc. A security vulnerability exists in the NETGEAR R6400 versions prior to 1.0.1.70 that allows an authenticated user to trigger a stack-based buffer overflow...
Trendnet多款产品代码问题漏洞
The Trendnet TRENDnet TEW-755AP, among others, is a router from Trendnet. A security vulnerability exists in a number of Trendnet products. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement. The following products and...