Lucene search
K

144 matches found

Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.9 views

PT-2026-47818

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description A buffer overflow occurs due to insufficient input validation of buffers. This allows authenticated administrators connected to the local network to make unauthorized modifications to the...

6.8CVSS5.5AI score0.00339EPSS
Exploits0References18
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.2 views

NETGEAR Routers 代码注入漏洞

NETGEAR Routers are a series of routers produced by NETGEAR, a company in the United States. NETGEAR Routers have a code injection vulnerability, which stems from insufficient input validation in the rbe970 model. This vulnerability could allow administrators who are connected to the local networ...

6.8CVSS5.4AI score0.0019EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.4 views

NETGEAR JR6150 输入验证错误漏洞

NETGEAR JR6150 is a wireless router produced by NETGEAR Corporation. The NETGEAR JR6150 has a vulnerability related to input validation. This vulnerability stems from insufficient input validation, which may allow administrators connected to the local network to make unauthorized modifications to...

6.8CVSS5.3AI score0.00163EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/23 12:0 a.m.16 views

Cisco IOS XE Software Lobby Ambassador Privilege Escalation (cisco-sa-iosxe-lobby-privesc-KwxBqJy)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would...

5.4CVSS8.8AI score0.00284EPSS
Exploits0References4
CVE
CVE
added 2026/03/25 4:7 p.m.72 views

CVE-2026-20083

CVE-2026-20083 describes a DoS vulnerability in the SCP server feature of Cisco IOS XE. An authenticated, low-privilege local attacker can trigger a reload via a crafted SCP command issued over SSH due to improper handling of a malformed request. The practical impact is a device DoS from unexpect...

6.5CVSS5.8AI score0.00093EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:4 p.m.2 views

CVE-2026-20125

A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to improper validation ...

7.7CVSS5.9AI score0.0028EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2001-0725

Malware in sbrugna...

5CVSS6.4AI score0.04054EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-0341

Malware in sbrugna...

7.8CVSS6.4AI score0.0167EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-50528

Malicious code in bioql PyPI...

8.4CVSS7.4AI score0.00961EPSS
Exploits0References3
NVD
NVD
added 2025/09/24 6:15 p.m.5 views

CVE-2025-20313

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...

6.7CVSS0.00176EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:0 a.m.3 views

The vulnerability of sub_54014 in Netgear EX6200 Wi-Fi router’s built-in software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of sub54014 in Netgear EX6200 Wi-Fi router’s built-in software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9CVSS8.2AI score0.01335EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the formSafeEmailFilter() function in the microprogramming software for Tenda FH451 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the issue of the operation being executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures or execut...

9CVSS8.1AI score0.00955EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/23 12:0 a.m.3 views

The vulnerability of the websGetVar function in the /goform/set_blacklist file of the LB-LINK router software allows a violator to gain full control over the device.

The vulnerability of the websGetVar function in the /goform/setblacklist file of the LB-LINK router microprogramming system exists due to the lack of measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow a remote attacker to gain ful...

6.5CVSS6.9AI score0.12815EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.4 views

The vulnerability of the bs_SetDNSInfo() function in the libshare-0.0.26.so library of the LB-LINK router software allows a attacker to execute arbitrary commands.

The vulnerability of the bsSetDNSInfo function in the libshare-0.0.26.so library of the LB-LINK router software is related to the lack of data cleaning measures at the management level when processing the parameters dns1 and dns2. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS5.9AI score0.02265EPSS
Exploits1References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/06/10 12:0 a.m.2 views

The vulnerability of the AT+MFPORTFWD command in the microprogramming software for Industrial Routers Microhard IPn4Gii-NA2 and BulletLTE-NA2 allows a hacker to enhance their privileges.

The vulnerability of the AT+MFPORTFWD command in the microprogramming software for Industrial Routers Microhard IPn4Gii-NA2 and BulletLTE-NA2 is related to the implementation or modification of certain arguments. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS5.5AI score0.01031EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/30 12:0 a.m.2 views

The vulnerability of the check_language_file() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the checklanguagefile function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.00842EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.3 views

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formNtp file in the microprogramming software for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formNtp file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker ...

9CVSS7.7AI score0.00662EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/16 12:0 a.m.1 views

The vulnerability of the Telnet protocol implementation in the microprogramming-based router software Tenda RX2 Pro allows a hacker to bypass security restrictions and execute arbitrary commands.

The vulnerability of the Telnet protocol implementation in Tenda RX2 Pro microprogramming router software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...

6.5CVSS5.8AI score0.04915EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.14 views

The vulnerability of the formOneSidCfgSet function in the microprogramming software for Tenda AC500 allows a hacker to cause a service failure.

The vulnerability of the formOneSidCfgSet function in the Tenda AC500 router’s microprogramming software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.4AI score0.11076EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the setScheduleCfg function in the microprogramming software for TOTOLINK X5000R allows a hacker to execute arbitrary commands.

The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by manipulating the hour parameter...

9CVSS8.4AI score0.01573EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder