Lucene search
+L

3270 matches found

Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.24 views

PT-2026-5257

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client former 1E Client versions prior to 26.1 Description A flaw exists due to insufficient validation of user-supplied data within the Content Distribution Service NomadBranch.exe of the TeamViewer DEX Client. This allows a...

6.5CVSS5.4AI score0.00696EPSS
SaveExploits0References6
OSV
OSV
added 2026/01/28 9:16 p.m.11 views

CVE-2026-1532

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

5.5CVSS5.5AI score0.00714EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/28 9:16 p.m.8 views

CVE-2026-1532

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

5.5CVSS0.00714EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/28 8:32 p.m.5 views

CVE-2026-1532

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

4.8CVSS5.6AI score0.00714EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 8:32 p.m.7 views

CVE-2026-1532 D-Link DCS-700L Music File Upload Service setUploadMusic uploadmusic path traversal

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

4.8CVSS5.6AI score0.00714EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/28 8:32 p.m.10 views

EUVD-2026-4849

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music File Upload Service. The manipulation of the argument UploadMusic leads to path traversal. The attack can only be initiated within the loc...

4.8CVSS5.6AI score0.00714EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/28 8:32 p.m.22 views

CVE-2026-1532

CVE-2026-1532 affects D-Link DCS-700L v1.03.09. The vulnerability is in the Music File Upload Service, specifically the uploadmusic function in /setUploadMusic, where manipulating the UploadMusic argument can trigger path traversal. Exploitation appears feasible within a local network, and public...

5.5CVSS5.6AI score0.00714EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/01/28 12:00 a.m.48 views

CVE-2022-40619

CVE-2022-40619 affects NETGEAR devices where the FunJSQ module exposes an HTTP server on the LAN and allows unauthenticated arbitrary command injection via the funjsq_access_token parameter. Affected devices/versions include R6230 < 1.1.0.112, R6260 < 1.1.0.88, R7000 < 1.0.11.134, R8900 ...

7.7CVSS6AI score0.02233EPSS
SaveIn wildExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.15 views

PT-2026-5216

Name of the Vulnerable Software and Affected Versions D-Link DCS-700L version 1.03.09 Description A path traversal issue exists in the Music File Upload Service component of D-Link DCS-700L. The issue is located in the uploadmusic function of the /setUploadMusic file. Manipulation of the...

4.8CVSS5.8AI score0.00714EPSS
SaveExploits1References7
OSV
OSV
added 2026/01/23 11:10 a.m.11 views

OESA-2026-1236 avahi security update

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared...

6.5CVSS5.5AI score0.00367EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/22 12:08 p.m.6 views

SUSE-SU-2026:0213-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability bsc1218680...

7.8CVSS7.1AI score0.00287EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2026/01/22 12:08 p.m.8 views

Security update for ovmf

This update for ovmf fixes the following issues: CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability bsc1218680. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

7CVSS7.1AI score0.00287EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2026/01/22 12:08 p.m.8 views

Security update for ovmf

This update for ovmf fixes the following issues: CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability bsc1218680. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

7CVSS7.1AI score0.00287EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/22 12:08 p.m.4 views

SUSE-SU-2026:0212-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability bsc1218680...

7.8CVSS6.1AI score0.00287EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/21 10:24 p.m.8 views

CVE-2026-21982

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware wher...

7.5CVSS5.3AI score0.00238EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/17 6:29 p.m.22 views

CVE-2026-0629

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device,...

8.7CVSS7AI score0.00468EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/16 6:16 p.m.12 views

CVE-2026-0629

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device,...

8.7CVSS0.00468EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/16 5:24 p.m.31 views

CVE-2026-0629 Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device,...

8.7CVSS0.00468EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/16 1:04 p.m.5 views

SUSE-SU-2026:20246-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability bsc1218680...

7.8CVSS6.1AI score0.00287EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/01/16 9:02 a.m.9 views

net: hns3: add VLAN id validation before using

...

8.8CVSS5.4AI score0.00134EPSS
SaveExploits0
Rows per page
Query Builder