Lucene search
+L

2317 matches found

CNNVD
CNNVD
added 2022/02/04 12:00 a.m.11 views

D-Link DIR-882 命令注入漏洞

The D-Link DIR-882 is a gigabit enterprise router from China Youxun D-Link. The D-Link DIR-882 suffers from a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

9.8CVSS6.1AI score0.03715EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/04 12:00 a.m.12 views

D-Link DIR-882 命令注入漏洞

D-Link DIR-882 is a wireless router from D-Link Taiwan, China. The D-Link DIR-882 suffers from an operating system command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

10CVSS6.2AI score0.04635EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/04 12:00 a.m.12 views

TotoLink X5000R 命令注入漏洞

TOTOLINK X5000R is a router. TOTOLINK X5000R v9.1.0u.6118B20201102 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary commands via the parameter FileName...

10CVSS6AI score0.04391EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/02/03 12:00 a.m.10 views

Tenda AX3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the devName parameter...

7.8CVSS6AI score0.01175EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/02/03 12:00 a.m.12 views

Tenda G1 and G3 缓冲区错误漏洞

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 v15.11.0.179502CN is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service DoS via the DnsHijackRule parameter...

7.8CVSS6.1AI score0.01175EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/25 4:15 p.m.9 views

CVE-2021-34870

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.521.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue resul...

6.5CVSS6.5AI score0.00895EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.14 views

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software lies in insufficient checking of the arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to insufficient testing of the arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.6CVSS8AI score0.00822EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.15 views

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.00695EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.11 views

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.00631EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.16 views

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, and EX6420 lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of the embedded software for routers such as D7800, EX6200v2, EX6250, EX7700, EX8000, LBR20, R7800, R8900, R9000, RAX120, RBS50Y, WNR2000v5, XR450, XR500, XR700, EX6150v2, EX7300, EX7320, EX6100v2, EX6400, EX7300v2, EX6410, RBR10, RBR20, RBR40, RBR50, EX6420, RBS10, RBS20, RBS40...

9.6CVSS8.1AI score0.0202EPSS
SaveExploits0References3Affected Software36
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.11 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the disclosure of protected information, allowing attackers to gain access to this information.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software is related to the disclosure of protected information. Exploiting this vulnerability could allow a remote attacker to gain access to this information...

5.3CVSS7.3AI score0.00898EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.12 views

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to improper resource release, allows a intruder to trigger a service failure.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to improper resource release. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

6.5CVSS6.5AI score0.00369EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/01/18 12:00 a.m.11 views

China Mobile An Lianbao WF-1 router 命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. A security vulnerability in China Mobile An Lianbao WF-1 router V1.0.1 can be exploited by an attacker to execute remote commands...

8.8CVSS8.1AI score0.02871EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/01/15 12:00 a.m.14 views

PT-2022-10304 · China Mobile · An Lianbao Wf-1

Name of the Vulnerable Software and Affected Versions: China Mobile An Lianbao WF-1 version 1.0.1 Description: The issue concerns a command injection vulnerability in the web interface of the affected router. Specifically, the "/api/ZRMacClone/mac addr clone" endpoint, which receives parameters v...

10CVSS9.5AI score0.03071EPSS
SaveExploits0References8
OSV
OSV
added 2022/01/14 12:15 p.m.8 views

CVE-2021-33962

China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/popusbdevice component...

9.8CVSS5.8AI score0.03708EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/14 12:00 a.m.13 views

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. A security vulnerability exists in China Mobile An Lianbao WF-1 router version v1.0.1, which stems from a lack of command filtering and escaping in the web interface/api/ZRUsb/popusbdevice component, resulting in an operatin...

10CVSS8.4AI score0.03708EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.14 views

The vulnerability of NETGEAR R6700v2 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR R6700v2 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

6.5CVSS7.8AI score0.01561EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.18 views

The vulnerability of TP-Link TL-WR802N router’s microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary commands.

The vulnerability of TP-Link TL-WR802N router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.5CVSS7.6AI score0.01947EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/05 7:15 p.m.11 views

CVE-2022-21651 Open redirect in shopware

Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may be arbitrary redirected due to incomplete URL handling in the shopware router. This issue has been resolved in version 5.7.7. There is no workaround and users are advised to...

6.8CVSS7AI score0.00774EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/01/03 8:18 a.m.8 views

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

8CVSS8.1AI score0.00677EPSS
SaveExploits0References2
Rows per page
Query Builder