Lucene search
+L

868 matches found

CNVD
CNVD
•added 2021/07/16 12:00 a.m.•50 views

D-LINK DIR-3040 Information Disclosure Vulnerability

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

7.5CVSS2.4AI score0.02013EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2021/07/16 12:00 a.m.•3 views

PT-2021-14795

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description A code execution issue exists in the Libcli Test Environment functionality. It can be triggered by a specially crafted network request, leading to arbitrary command execution. An attacker can exploit...

9.1CVSS0.02886EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2021/07/16 12:00 a.m.•0 views

PT-2021-14793

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description An information disclosure issue exists in the Zebra IP Routing Manager functionality. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a...

7.5CVSS0.02013EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/16 12:00 a.m.•10 views

CVE-2021-21817: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS5.9AI score0.02013EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/16 12:00 a.m.•4 views

CVE-2021-21818: Use of Hard-coded Password

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS5.9AI score0.01691EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/16 12:00 a.m.•5 views

CVE-2021-21819: Improper Neutralization of Special Elements used in an OS Command

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

9.1CVSS6.3AI score0.02886EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/16 12:00 a.m.•5 views

CVE-2021-21820: Use of Hard-coded Credentials

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

10CVSS6.1AI score0.02962EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•16 views

D-LINK DIR-3040 信任管理问题漏洞

The D-Link DIR-3040 is a router from AUO D-Link of Taiwan, China. It provides the function of connecting to a network. A trust management issue vulnerability exists in Libcli for D-LINK DIR-3040 1.13B03, which stems from a specially designed network request can lead to code execution. No detailed...

10CVSS5.8AI score0.02962EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/07/15 12:00 a.m.•16 views

D-LINK DIR-3040 信息泄露漏洞

An information disclosure vulnerability exists in the D-LINK DIR-3040 Zebra IP, a router from D-Link Taiwan, China that provides connectivity to the Internet. The vulnerability stems from a specially designed network request that could lead to the disclosure of sensitive information. An attacker...

7.5CVSS5.6AI score0.02013EPSS
SaveExploits2References3
Talos
Talos
•added 2021/07/15 12:00 a.m.•115 views

D-LINK DIR-3040 Libcli test environment hard-coded password vulnerability

Summary A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions D-LINK DIR-3040...

10CVSS9.7AI score0.02962EPSS
SaveExploits1
Talos
Talos
•added 2021/07/15 12:00 a.m.•85 views

D-LINK DIR-3040 Zebra IP routing manager information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability. Test...

7.5CVSS7.5AI score0.02013EPSS
SaveExploits2
OSV
OSV
•added 2021/06/17 11:15 a.m.•24 views

CVE-2021-21777

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read...

10CVSS6.4AI score
SaveExploits0References1
NVD
NVD
•added 2021/06/17 11:15 a.m.•48 views

CVE-2021-21777

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read...

10CVSS0.01667EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/06/17 11:15 a.m.•9 views

CVE-2021-21777

An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read...

10CVSS7.2AI score0.01667EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/06/16 12:00 a.m.•22 views

EIP Stack Group OpENer 缓冲区错误漏洞

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stack functionality to IO adapter devices . A security vulnerability exists in EIP Stack Group OpENer 2.3 that stems from a specially crafted network request that could result in an out-of-bounds read...

10CVSS7.9AI score0.01667EPSS
SaveExploits1References2
Talos
Talos
•added 2021/06/16 12:00 a.m.•72 views

EIP Stack Group OpENer Ethernet/IP UDP handler information disclosure vulnerability

Summary An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read. Tested Versions EIP Stack Group OpENer 2.3 EIP Stack Group OpENe...

10CVSS9.1AI score0.01667EPSS
SaveExploits1
NVD
NVD
•added 2021/06/09 2:15 p.m.•50 views

CVE-2021-27620

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method Ups::AddPart which will trigger an...

5.9CVSS0.01208EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/09 12:00 a.m.•15 views

PT-2021-17561 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

5.9CVSS6.7AI score0.01208EPSS
SaveExploits0References3
NVD
NVD
•added 2021/05/27 11:15 a.m.•44 views

CVE-2021-32459

Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execut...

6.5CVSS0.0096EPSS
SaveExploits0References2
Prion
Prion
•added 2021/05/27 11:15 a.m.•27 views

Hardcoded credentials

Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execut...

5.5CVSS6.7AI score0.0096EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder