Lucene search
K

366 matches found

CNNVD
CNNVD
added 2026/02/25 12:0 a.m.4 views

Tenda F453 安全漏洞

The Tenda F453 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.3 of the Tenda F453 contains a security vulnerability. This vulnerability stems from the improper handling of the page parameter in the fromNatStaticSetting function within the httpd component or the...

9CVSS7.5AI score0.00106EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2026/02/23 12:0 a.m.4 views

PT-2026-21552

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.1498 B20250826 Description The software contains an OS command injection issue in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable. The host time parameter is processed by the sub 40C404 function a...

8.8CVSS5.7AI score0.03148EPSS
Exploits1References6
CNVD
CNVD
added 2026/01/19 12:0 a.m.1 views

TRENDnet TEW-811DRU Operating System Command Injection Vulnerability

The TRENDnet TEW-811DRU is a wireless router from TRENDnet. The TRENDnet TEW-811DRU suffers from an operating system command injection vulnerability that stems from a misuse of the parameter DeviceURL in the file uapply.cgi of the component httpd, which can be exploited by an attacker to cause...

8.6CVSS7.1AI score0.01508EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2025/12/30 4:2 p.m.2 views

CVE-2025-15255

A vulnerability was determined in Tenda W6-S 1.0.0.4510. This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHandler. Executing a manipulation of the argument Cookie can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has...

10CVSS6.2AI score0.00606EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-52277

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2 160527, ≤ WA850RE V3 160922...

7.1CVSS7.1AI score0.00212EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.2 views

PT-2025-52276

Command Injection vulnerability in TP-Link WA850RE httpd modules allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2 160527, ≤ WA850RE V3 160922...

8.5CVSS7.2AI score0.00166EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.2 views

Linksys E1200 安全漏洞

The Linksys E1200 is a router from Linksys USA. The Linksys E1200 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to cause the execution of arbitrary code or a denial of service...

8.8CVSS7.5AI score0.05608EPSS
Exploits3References5
RedhatCVE
RedhatCVE
added 2025/10/15 3:47 p.m.2 views

CVE-2025-58903

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS6.7AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2025/10/14 4:15 p.m.3 views

CVE-2025-58903

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS0.00064EPSS
Exploits0References1
CVE
CVE
added 2025/10/14 3:22 p.m.17 views

CVE-2025-58903

CVE-2025-58903 affects Fortinet FortiOS FortiOS API in 7.6.0–7.6.3 and earlier than 7.4.8. It is an Unchecked Return Value (CWE-252) vulnerability that, when exploited by an authenticated user via a crafted request, can trigger a Null Pointer Dereference and crash the HTTP daemon, enabling a deni...

4.9CVSS6.3AI score0.00064EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:0 a.m.1 views

Fortinet Fortigate Multiple Unchecked Return Value leading to Null Pointer Dereference (FG-IR-25-653)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-653 advisory. - An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows...

4.9CVSS5.6AI score0.00064EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.1 views

PT-2025-41966

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS6.7AI score0.00064EPSS
Exploits0References2
OSV
OSV
added 2025/10/09 4:15 p.m.1 views

CVE-2025-59975

An Uncontrolled Resource Consumption vulnerability in the HTTP daemon httpd of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device with inbound API calls to consume all resources on the system, leading to a Denial of Service DoS. After continuously...

8.7CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/10/09 3:58 p.m.5 views

CVE-2025-59975 Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS

An Uncontrolled Resource Consumption vulnerability in the HTTP daemon httpd of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device with inbound API calls to consume all resources on the system, leading to a Denial of Service DoS. After continuously...

8.7CVSS0.00108EPSS
Exploits0References1
CVE
CVE
added 2025/10/09 3:58 p.m.8 views

CVE-2025-59975

The CVE-2025-59975 issue affects Juniper Networks Junos Space, specifically the HTTP daemon (httpd). An unauthenticated network-based attacker can flood the system with inbound API calls, causing uncontrolled resource consumption and a Denial of Service (DoS). Consequence: exhaustion of file hand...

8.7CVSS6.6AI score0.00108EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.2 views

PT-2025-41409

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 22.2R1 Patch V3 Juniper Networks Junos Space versions 23.1 before 23.1R1 Patch V3 Description An Uncontrolled Resource Consumption issue exists in the HTTP daemon httpd of Juniper Networks Junos...

8.7CVSS6.6AI score0.00108EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2013-2124

Malware in sbrugna...

9.8CVSS9.4AI score0.00459EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2003-1199

Malware in sbrugna...

5CVSS6.4AI score0.00739EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-1999-0267

Malware in sbrugna...

7.5CVSS6.4AI score0.06259EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2013-2140

Malware in sbrugna...

4.3CVSS6.4AI score0.00252EPSS
Exploits1References3
Rows per page
Query Builder