Lucene search
+L

264 matches found

CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•18 views

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that originates in the destination, netmask, and gateway parameters, which can be exploited by an attacker to cause a denial of service...

5.7CVSS7.1AI score0.0048EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•7 views

CVE-2025-25896: Stack-based Buffer Overflow

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

5.7CVSS6.1AI score0.0048EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•17 views

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from China-based AUO D-Link. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that originates in the destination, netmask and gateway parameters, which can be exploited by an attacker to cause a denial of service...

5.7CVSS7.1AI score0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•8 views

CVE-2025-25891: Stack-based Buffer Overflow

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

5.7CVSS6.1AI score0.00321EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•28 views

PT-2025-7110 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.01 Description: A buffer overflow issue was discovered via the destination, netmask, and gateway parameters. This issue allows attackers to cause a Denial of Service DoS via a crafted packet. Recommendations: For...

5.7CVSS7.3AI score0.0048EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2025/01/19 12:00 a.m.•17 views

The vulnerability of the set_add_routing() function in the internet.cgi script of the Wavlink AC3000 (WL-WN533A8) router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the setaddrouting function in the internet.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the lack of data cleaning at the control level when processing the netmask parameter. Exploiting this vulnerability allows a remote attacker to...

9.1CVSS8.2AI score0.05876EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
•added 2025/01/17 12:00 a.m.•30 views

WAVLINK AC3000 internet.cgi set_add_routing function netmask parameter command injection vulnerability

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A command injection vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the netmask parameter of the internet.cgi setaddrouting function failing to correctly filter constructed command special...

9.1CVSS7.3AI score0.05876EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/14 3:15 p.m.•19 views

CVE-2024-39762

Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...

7.2CVSS6AI score0.05876EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/01/14 2:21 p.m.•47 views

CVE-2024-39762

Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...

9.1CVSS0.05876EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•18 views

WAVLINK AC3000 命令注入漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A command injection vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the netmask parameter of the internet.cgi setaddrouting function failing to correctly filter constructed command special...

9.1CVSS7.8AI score0.05876EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•5 views

CVE-2024-39762: Improper Neutralization of Special Elements used in a Command

Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...

9.1CVSS6.1AI score0.05876EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•14 views

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability in the pppoe.cgi script of NETGEAR R7000P router software is related to buffer overflows in the stack when processing the pppoelocalnetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted POST request...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•20 views

The vulnerability in the l2tp.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/19 12:00 a.m.•14 views

The vulnerability in the genie_pptp.cgi script of the Netgear R7000P router’s software allows a hacker to induce a service failure.

The vulnerability in the geniepptp.cgi script of the Netgear R7000P router operating system is related to the copying of buffers without checking the size of the input data during the processing of the pptpusernetmask parameter. Exploiting this vulnerability allows an attacker to cause a service...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/11/05 3:15 p.m.•14 views

CVE-2024-52028

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at wizpptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00312EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/05 3:15 p.m.•14 views

CVE-2024-52030

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at ruwanflow.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/05 3:15 p.m.•13 views

CVE-2024-51017

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tpusernetmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/05 3:15 p.m.•16 views

CVE-2024-51018

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptpusernetmask parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•30 views

NETGEAR R7000P 安全漏洞

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the wizpptp.cgi component that fails to correctly validate the length of the input data, and can be exploited by a remo...

5.7CVSS8AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/05 12:00 a.m.•13 views

PT-2024-8265 · NetGear · Netgear R7000P

Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the ru wan flow.cgi script, specifically via the pptp user netmask parameter. This allows attackers to cause a Denial of Service DoS by sending a crafte...

5.7CVSS7.5AI score0.00305EPSS
SaveExploits0References7
Rows per page
Query Builder