Lucene search
+L

2321 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•6 views

CVE-2024-29671: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...

9.8CVSS6.6AI score0.24521EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/16 12:00 a.m.•6 views

PT-2024-22958

Name of the Vulnerable Software and Affected Versions NEXTU FLATA AX1500 Router version 1.0.2 Description The issue is a buffer overflow vulnerability that allows a remote attacker to execute arbitrary code via the POST request handler component. This enables the attacker to run any code they wan...

9.8CVSS0.24521EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2024/12/16 12:00 a.m.•17 views

NEXTU FLATA AX1500 安全漏洞

The NEXTU FLATA AX1500 is a wireless router from NEXTU. A security vulnerability exists in the NEXTU FLATA AX1500 version v.1.0.2, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code via the POST request handler component...

9.8CVSS8.1AI score0.24521EPSS
SaveExploits1References3
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•58 views

TP-LINK VN020 Buffer Overflow Vulnerability

The TP-LINK VN020 is a wireless modem from China P&L TP-LINK. A security vulnerability exists in TP-Link VN020 F3vT TTV6.2.1021 version, which originates from a buffer overflow in the parameter NewConnectionType in the component SOAP request handler. An attacker can exploit this vulnerability to...

8.8CVSS7.4AI score0.04965EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/12/11 12:00 a.m.•16 views

The vulnerability of the Incomplete SOAP Request Handler component in TP-Link VN020 F3v(T) software, a wireless router, allows a malicious actor to trigger a service failure.

The vulnerability of the Incomplete SOAP Request Handler component in the TP-Link VN020 F3vT wireless router software relates to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failure remotely...

6.5CVSS6.5AI score0.09251EPSS
SaveExploits2References4Affected Software1
NVD
NVD
•added 2024/12/08 10:15 a.m.•47 views

CVE-2024-12343

A vulnerability classified as critical has been found in TP-Link VN020 F3vT TTV6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be...

8.8CVSS0.04965EPSS
SaveExploits0References5
CVE
CVE
•added 2024/12/08 9:31 a.m.•899 views

CVE-2024-12343

TP-Link VN020 F3v(T) TT_V6.2.1021 is affected, specifically the SOAP Request Handler’s /control/WANIPConnection component where manipulating the NewConnectionType argument triggers a buffer overflow. This vulnerability requires local-network access and has public exploitation information, with po...

8.8CVSS6.7AI score0.04965EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/12/08 7:15 a.m.•53 views

CVE-2024-12342

A vulnerability was found in TP-Link VN020 F3vT TTV6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiat...

7.1CVSS0.09251EPSS
SaveExploits2References4
CVE
CVE
•added 2024/12/08 6:31 a.m.•127 views

CVE-2024-12342

TP-Link VN020 F3v(T) TT_V6.2.1021 has a high-severity vulnerability in the Incomplete SOAP Request Handler for the WANIPConnection UPnP service. The issue enables denial of service via malformed SOAP requests, exploitable from the local network. Public PoCs and exploit details exist (e.g., Exploi...

7.1CVSS6.4AI score0.09251EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2024/12/08 12:00 a.m.•18 views

PT-2024-9297 · Tp Link · Tp-Link Vn020 F3V

Name of the Vulnerable Software and Affected Versions: TP-Link VN020 F3vT version TT V6.2.1021 Description: A critical issue affects the Incomplete SOAP Request Handler component, specifically the processing of the file /control/WANIPConnection. This can lead to denial of service when exploited...

7.1CVSS6.3AI score0.09251EPSS
SaveExploits2References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/08 12:00 a.m.•4 views

CVE-2024-12343: Buffer Copy without Checking Size of Input

A vulnerability classified as critical has been found in TP-Link VN020 F3vT TTV6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be...

8.8CVSS5.8AI score0.04965EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/08 12:00 a.m.•4 views

CVE-2024-12342: Improper Resource Shutdown or Release

A vulnerability was found in TP-Link VN020 F3vT TTV6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiat...

7.1CVSS5.2AI score0.09251EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2024/12/08 12:00 a.m.•25 views

PT-2024-9331 · Tp Link · Tp-Link Vn020 F3V

Name of the Vulnerable Software and Affected Versions: TP-Link VN020 F3vT version TT V6.2.1021 Description: A critical vulnerability has been found in the TP-Link VN020 F3vT router. The issue is related to the SOAP Request Handler component, specifically an unknown function of the file...

8.8CVSS6.8AI score0.04965EPSS
SaveExploits0References15
NVD
NVD
•added 2024/12/04 11:15 p.m.•34 views

CVE-2024-12183

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Th...

5.4CVSS0.00436EPSS
SaveExploits1References4
Mend
Mend
•added 2024/12/04 11:00 p.m.•3 views

CVE-2024-12183

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Th...

5.4CVSS0.00436EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•3 views

CVE-2024-12183: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Th...

5.4CVSS3.9AI score0.00436EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/27 5:15 p.m.•24 views

CVE-2024-11860

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS0.00863EPSS
SaveExploits1References6
OSV
OSV
•added 2024/11/27 5:15 p.m.•14 views

CVE-2024-11860

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.5CVSS5.6AI score0.00863EPSS
SaveExploits1References6
CVE
CVE
•added 2024/11/27 4:31 p.m.•84 views

CVE-2024-11860

CVE-2024-11860 affects SourceCodester Best House Rental Management System 1.0. The vulnerability exists in the POST Request Handler, specifically the file path /rental/ajax.php?action=delete_tenant, where manipulation of the argument id leads to improper authorization. This can be exploited remot...

6.9CVSS7.3AI score0.00863EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•3 views

CVE-2024-11860: Improper Authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS6.2AI score0.00863EPSS
SaveExploits1References1
Rows per page
Query Builder