Lucene search
+L

1510 matches found

Prion
Prion
added 2020/05/07 11:15 p.m.29 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 855rev4-up-ver1-0-1-P120191213-rel60361 Wi-Fi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechani...

5.2CVSS8.2AI score0.0112EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/05/07 10:20 p.m.40 views

CVE-2020-10916

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 855rev4-up-ver1-0-1-P120191213-rel60361 Wi-Fi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechani...

8CVSS8.2AI score0.0112EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:00 a.m.41 views

Intel Wi-Fi Link Driver Netwtw06 Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Intel Wi-Fi Link Driver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of 802.11 frames. The issue results from the lack of...

8.8CVSS1.7AI score0.00395EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/04/15 12:00 a.m.44 views

Intel Wi-Fi Link Driver Netwtw06 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Intel Wi-Fi Link Driver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of 802.11 frames. The issue results from the lack of...

8.8CVSS3.3AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/25 9:15 p.m.24 views

CVE-2020-10884

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP...

8.8CVSS8.3AI score0.26476EPSS
SaveExploits5References2
NVD
NVD
added 2020/03/25 9:15 p.m.27 views

CVE-2020-10882

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on...

8.8CVSS9.2AI score0.41363EPSS
SaveExploits5References2
Prion
Prion
added 2020/03/25 9:15 p.m.24 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on...

8.3CVSS9.2AI score0.41363EPSS
SaveExploits5References2Affected Software1
Prion
Prion
added 2020/03/25 9:15 p.m.36 views

Hardcoded credentials

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP...

5.8CVSS8.8AI score0.26476EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
added 2020/03/25 7:15 p.m.34 views

CVE-2020-10884

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP...

8.1CVSS8.7AI score0.26476EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2020/03/25 7:15 p.m.39 views

CVE-2020-10882

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on...

8.8CVSS9.2AI score0.41363EPSS
SaveExploits5References2
NVD
NVD
added 2020/03/23 9:15 p.m.34 views

CVE-2020-8864

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login...

8.8CVSS9.2AI score0.80221EPSS
SaveExploits0References2
Prion
Prion
added 2020/03/23 9:15 p.m.27 views

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login...

8.3CVSS9.1AI score0.80221EPSS
SaveExploits0References2Affected Software3
Zero Day Initiative
Zero Day Initiative
added 2020/03/12 12:00 a.m.47 views

(Pwn2Own) Xiaomi Mi9 Browser Untrusted Site Redirection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Xiaomi Mi9 Browser. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Xiaom...

5.5CVSS2.9AI score0.013EPSS
SaveExploits0
Prion
Prion
added 2020/02/22 12:15 a.m.26 views

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

8.3CVSS9.2AI score0.13343EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/02/22 12:15 a.m.66 views

CVE-2020-8862

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

8.8CVSS8.3AI score0.13343EPSS
SaveExploits0References4
Prion
Prion
added 2020/02/22 12:15 a.m.27 views

Authentication flaw

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

8.3CVSS9.1AI score0.06544EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/22 12:00 a.m.31 views

CVE-2020-8862

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

8.8CVSS9.1AI score0.13343EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/02/22 12:00 a.m.42 views

CVE-2020-8861

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

8.8CVSS9.1AI score0.06544EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/02/21 12:00 a.m.42 views

D-Link DAP-2610 Router login Incorrect Comparison Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper...

8.8CVSS3.1AI score0.13343EPSS
SaveExploits0References1
NVD
NVD
added 2020/02/10 9:51 p.m.32 views

CVE-2019-17137

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC1200 R6220 Firmware version 1.1.0.86 Smart WiFi Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of path strings...

9.4CVSS9.4AI score0.02737EPSS
SaveExploits0References1
Rows per page
Query Builder