Lucene search
+L

597 matches found

CNVD
CNVD
added 2021/12/29 12:00 a.m.56 views

OpenWrt Cross-Site Scripting Vulnerability (CNVD-2022-00602)

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the NAT Rules Name screen. No detailed vulnerability details are...

5.4CVSS1.9AI score0.00515EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/29 12:00 a.m.51 views

OpenWrt Cross-Site Scripting Vulnerability (CNVD-2022-00600)

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the Traffic Rules Name screen. No detailed vulnerability details...

5.4CVSS2AI score0.00515EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/27 11:15 p.m.7 views

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

5.4CVSS5.8AI score0.00515EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/27 11:15 p.m.25 views

CVE-2021-45904

OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...

5.4CVSS0.00515EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/27 11:15 p.m.32 views

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

5.4CVSS0.00515EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/27 11:15 p.m.28 views

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

5.4CVSS0.00515EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/27 11:15 p.m.8 views

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

5.4CVSS5.4AI score0.00515EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/27 11:15 p.m.21 views

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

5.4CVSS5.4AI score0.00515EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/27 11:15 p.m.10 views

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

5.4CVSS5.8AI score0.00515EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/27 11:15 p.m.9 views

CVE-2021-45904

OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...

5.4CVSS5.8AI score0.00515EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/27 11:15 p.m.7 views

CVE-2021-45904

OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...

5.4CVSS5.4AI score0.00515EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/27 11:15 p.m.23 views

Design/Logic Flaw

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

3.5CVSS5.2AI score0.00515EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/27 11:15 p.m.16 views

Design/Logic Flaw

OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...

3.5CVSS5.2AI score0.00515EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/27 11:15 p.m.18 views

Cross site scripting

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

3.5CVSS5.2AI score0.00515EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/27 10:32 p.m.35 views

CVE-2021-45904

OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...

5.4AI score0.00515EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/27 10:32 p.m.71 views

CVE-2021-45904

OpenWrt 21.02.1 is affected by CVE-2021-45904, a cross-site scripting (XSS) vulnerability in the Port Forwards Add Name screen caused by insufficient input filtering/escaping. The vulnerability details in connected sources confirm the affected software/version and the underlying issue. There is n...

5.4CVSS5.2AI score0.00515EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/27 10:32 p.m.34 views

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

5.4AI score0.00515EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/27 10:32 p.m.86 views

CVE-2021-45905

Concretely, CVE-2021-45905 affects OpenWrt 21.02.1 and is an XSS in the Traffic Rules Name screen caused by insufficient input filtering/escaping. The vulnerability has a demonstrated impact on confidentiality/integrity via client-side script injection, with CVSS values (2.0: 3.5/LOW; 3.1: 5.4/ME...

5.4CVSS5.2AI score0.00515EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/27 10:32 p.m.31 views

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

5.4AI score0.00515EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/27 10:32 p.m.77 views

CVE-2021-45906

OpenWrt 21.02.1 is affected by a cross-site scripting (XSS) vulnerability in the NAT Rules Name screen of the LuCI web interface. The underlying issue is insufficient input filtering/escaping for user-supplied parameters in that screen. Exploitation could occur remotely via the web UI, with user ...

5.4CVSS5.2AI score0.00515EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder