264 matches found
NETGEAR R7000P 安全漏洞
The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the ruwanflow.cgi component that fails to correctly validate the length of the input data, and can be exploited by a...
NETGEAR R7000P 安全漏洞
The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR R7000P v1.3.3.154, which originates from the pptpusernetmask parameter in the geniepptp.cgi component that fails to correctly validate the length of the input data, and can be exploited by ...
PT-2024-8263 · NetGear · Netgear R7000P
Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.3.154 Description: The issue is related to a stack overflow in the genie pptp.cgi script, specifically via the pptp user netmask parameter. This allows attackers to cause a Denial of Service DoS by sending a crafted...
PT-2024-8541
Name of the Vulnerable Software and Affected Versions Netgear R7000P version 1.3.3.154 Description The issue is related to a stack overflow vulnerability in the l2tp.cgi script of the NETGEAR R7000P router's firmware. This vulnerability occurs when handling the l2tp user netmask parameter...
PT-2024-10142 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 M33A8.V5030.210505 Description: Multiple OS command injection vulnerabilities exist in the set add routing functionality of the internet.cgi script. A specially crafted HTTP request can lead to arbitrary command execution. An...
CVE-2024-28446
Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...
CVE-2024-28446
Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...
Shenzhen Libituo Technology LBT-T300-mini1 Security Breach
Shenzhen Libituo Technology LBT-T300-mini1 is a 5G industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-mini1 v1.2.9, which is caused by a buffer overflow in the lannetmask parameter via /apply.cgi...
CVE-2024-28446
Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 v1.2.9 was discovered to contain a buffer overflow via lannetmask parameter at /apply.cgi...
PT-2024-22439 · Shenzhen Libituo Technology Co. · Lbt-T300-Mini1
Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-mini1 version 1.2.9 Description: A buffer overflow issue was discovered via the lan netmask parameter at the "/apply.cgi" API endpoint. Recommendations: For version 1.2.9, as a temporary workaroun...
CVE-2023-51013
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi...
TOTOLINK EX1800T 安全漏洞
TOTOLINK EX1800T is a Wi-Fi range extender from China's TOTOLINK, which supports Wi-Fi 6 technology and enhances signal coverage by connecting wirelessly to a router, making it suitable for home and small office environments. A command execution vulnerability exists in the TOTOLINK EX1800T, which...
openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0215-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0215-1 advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in...
openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0217-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0217-1 advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in...
OPENSUSE-SU-2023:0217-1 Security update for perl-Net-Netmask
This update for perl-Net-Netmask fixes the following issues: CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This in some situations allows attackers to bypass access control that is based on IP addresses. boo1184425...
OPENSUSE-SU-2023:0215-1 Security update for perl-Net-Netmask
This update for perl-Net-Netmask fixes the following issues: CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This in some situations allows attackers to bypass access control that is based on IP addresses.boo1184425...
Security update for perl-Net-Netmask (moderate)
openSUSE Security Update: Security update for perl-Net-Netmask Announcement ID: openSUSE-SU-2023:0217-1 Rating: moderate References: 1184425 Cross-References: CVE-2021-29424 CVSS scores: CVE-2021-29424 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-29424 SUSE: 7.5...
Security update for perl-Net-Netmask (moderate)
openSUSE Security Update: Security update for perl-Net-Netmask Announcement ID: openSUSE-SU-2023:0215-1 Rating: moderate References: 1184425 Cross-References: CVE-2021-29424 CVSS scores: CVE-2021-29424 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2021-29424 SUSE: 7.5...
SAP Web Dispatcher Access Control Error Vulnerability
SAP Web Dispatcher is the core component of Load Balancing from SAP, which supports load balancing and provides the function of reverse proxy so that users from outside the network can access internal applications. An Access Control Error vulnerability exists in SAP Web Dispatcher, which stems fr...
CVE-2023-29108
The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources...