Lucene search
+L

13 matches found

NVD
NVD
•added 2026/09/04 1:20 p.m.•14 views

CVE-2026-74237

GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The webtoolscmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An...

7.1CVSS0.00386EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/04 12:24 p.m.•37 views

CVE-2026-74237 GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client

GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The webtoolscmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An...

7.1CVSS0.00386EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/04 12:24 p.m.•13 views

EUVD-2026-71086

GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The webtoolscmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An...

7.1CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/04 12:24 p.m.•7 views

CVE-2026-74237 GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client

GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The webtoolscmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An...

7.1CVSS5.9AI score0.00386EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/04 12:24 p.m.•24 views

CVE-2026-74237

GFI Exinda AI versions before 7.6.5 contain an argument injection vulnerability in the Tools Iperf Client functionality. The web_tools_cmd() function constructs an iperf command from user-supplied server and options parameters without sanitization, allowing injection of arbitrary iperf flags. An ...

7.1CVSS5.5AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•16 views

PT-2026-85519

GFI Exinda AI before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The web tools cmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An authenticated...

7.1CVSS5.5AI score0.00386EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-74237: Improper Neutralization of Argument Delimiters in a Command

GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The webtoolscmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An...

7.1CVSS6AI score0.00386EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-42974

Malicious code in bioql PyPI...

7.2CVSS9.2AI score0.0128EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/07 8:15 a.m.•17 views

CVE-2023-39240

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

7.2CVSS6AI score0.0128EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/07 8:15 a.m.•28 views

CVE-2023-39240

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

7.2CVSS7.1AI score0.0128EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/09/07 7:25 a.m.•57 views

CVE-2023-39240 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

7.2CVSS7.3AI score0.0128EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/07 7:25 a.m.•2548 views

CVE-2023-39240

CVE-2023-39240 affects ASUS RT-AX56U V2: a format string vulnerability in the iperf client API, caused by insufficient validation in set_iperf3_cli.cgi. A remote attacker with administrator privileges could achieve remote code execution or service disruption. Exploitation details are not provided...

7.2CVSS7.3AI score0.0128EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/09/07 12:00 a.m.•13 views

ASUS RT-AX56U Formatting String Error Vulnerability

The ASUS RT-AX56U is a wireless router from Asus China. The ASUS RT-AX56U suffers from a Format String Error vulnerability that stems from a format string vulnerability found in the iperf client function API...

7.2CVSS6.8AI score0.0128EPSS
SaveExploits0References2
Rows per page
Query Builder