Lucene search
+L

1054 matches found

CVE
CVE
added 2023/03/21 5:41 p.m.65 views

CVE-2022-38458

CVE-2022-38458 affects Netgear Orbi Router RBR750 (4.6.8.5). Talos documented a cleartext transmission vulnerability in Remote Management that enables MITM-based disclosure of sensitive data. The TALOS-2022-1598 advisory confirms the vulnerability details and notes that vulnerability appears in t...

6.5CVSS6.2AI score0.00614EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/03/21 12:0 a.m.4 views

NETGEAR RBR750 安全漏洞

The NETGEAR RBR750 is a home WiFi system from NETGEAR. An information disclosure vulnerability exists in the NETGEAR RBR750 version 4.6.8.5, which originates from a plaintext transmission in the remote management function. An attacker could exploit the vulnerability to obtain sensitive informatio...

6.5CVSS6.1AI score0.00614EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/03/21 12:0 a.m.8 views

PT-2023-13606 · NetGear · Netgear Orbi Router Rbr750

Name of the Vulnerable Software and Affected Versions: Netgear Orbi Router RBR750 version 4.6.8.5 Description: A cleartext transmission issue exists in the Remote Management functionality. This can be exploited by a specially-crafted man-in-the-middle attack, potentially leading to the disclosure...

6.5CVSS6.3AI score0.00614EPSS
SaveExploits1References7
Talos
Talos
added 2023/03/21 12:0 a.m.35 views

Netgear Orbi Router RBR750 Remote Management cleartext transmission vulnerability

Talos Vulnerability Report TALOS-2022-1598 Netgear Orbi Router RBR750 Remote Management cleartext transmission vulnerability March 21, 2023 CVE Number CVE-2022-38458 SUMMARY A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8.5....

6.5CVSS6.1AI score0.00614EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/03/13 12:0 a.m.37 views

NETGEAR WNR2000 RCE (PSV-2016-0261)

NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that uses a parameter in the administration webapp. This vulnerability can only be exploited when an...

9.8CVSS9.5AI score0.42696EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.6 views

SUSE CVE-2018-10058

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers...

8.8CVSS9.1AI score0.03932EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:12 a.m.3 views

SUSE CVE-2019-11131

Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

9.8CVSS9.4AI score0.01792EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/15 12:0 a.m.9 views

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

5.3CVSS5.8AI score0.00502EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/31 12:0 a.m.11 views

PT-2023-7466 · Unknown · Hgiga Powerstation

Name of the Vulnerable Software and Affected Versions: HGiga PowerStation affected versions not specified Description: The issue is related to insufficient filtering for user input in the remote management function of the system, allowing an authenticated remote attacker to inject and execute...

9CVSS8.5AI score0.00933EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/01/31 12:0 a.m.7 views

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

5.3CVSS7.2AI score0.00408EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2023/01/23 2:30 p.m.21 views

libvirt bug fix and enhancement update

An update is available for libvirt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...

1.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/01/14 4:11 a.m.4 views

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers

Cisco has warned of two security vulnerabilities affecting end-of-life EoL Small Business RV016, RV042, RV042G, and RV082 routers that it said will not be fixed, even as it acknowledged the public availability of proof-of-concept PoC exploit. The issues are rooted in the router's web-based...

9.8CVSS7.5AI score0.01633EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2023/01/14 4:11 a.m.44 views

Cisco Issues Warning for Unpatched Vulnerabilities in EoL Business Routers

Cisco has warned of two security vulnerabilities affecting end-of-life EoL Small Business RV016, RV042, RV042G, and RV082 routers that it said will not be fixed, even as it acknowledged the public availability of proof-of-concept PoC exploit. The issues are rooted in the router's web-based...

0.6AI score0.01633EPSS
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/12/14 12:30 p.m.20 views

Cyber Signals: Risks to critical infrastructure on the rise

Today, the third edition of Cyber Signals was released spotlighting security trends and insights gathered from Microsoft’s 43 trillion daily security signals and 8,500 security experts. In this edition, we share new insights on wider risks that converging IT, Internet of Things IoT, and operation...

0.2AI score
SaveExploits0
CNNVD
CNNVD
added 2022/12/05 12:0 a.m.26 views

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

7.5CVSS8.2AI score0.0171EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/05 12:0 a.m.10 views

AMI MegaRAC 授权问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. AMI MegaRAC has an authorization issue...

9.8CVSS8.6AI score0.00655EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/12/05 12:0 a.m.6 views

AMI MegaRAC 授权问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. AMI MegaRAC has an authorization issue...

9.8CVSS8.6AI score0.00647EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/12/01 12:0 a.m.5 views

IXPdata EasyInstall 安全漏洞

IXPdata EasyInstall is a remote management and deployment suite from IXPdata, Denmark. A security vulnerability exists in IXPdata EasyInstall version 6.6.14725 that stems from improperly restricted access control...

8.8CVSS8AI score0.00185EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/11/30 12:0 a.m.38 views

Realtek RTL8111FP-CG License Issue Vulnerability

The Realtek RTL8111FP-CG is an Ethernet controller. An authorization issue vulnerability exists in Realtek RTL8111FP-CG Firmware prior to version 5.0.23, which stems from a lack of authorization for the Dash remote management feature, and can be exploited by an unauthenticated attacker on an...

6.5CVSS6.5AI score0.00282EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/29 4:15 a.m.7 views

CVE-2022-32966

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

6.5CVSS5.8AI score0.00282EPSS
SaveExploits0References1
Rows per page
Query Builder