Lucene search
K

2274 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.4 views

The vulnerability of RUCKUS Wireless Access Points (Ruckus AP) lies in insufficient verification of input data, allowing attackers to execute arbitrary codes.

The vulnerability of RUCKUS Wireless Access Points involves insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via the SSH interface...

10CVSS5.9AI score
Exploits0References1Affected Software4
SUSE CVE
SUSE CVE
added 2024/11/21 3:48 a.m.2 views

SUSE CVE-2024-52010

Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH...

8.6CVSS8.2AI score0.01442EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.3 views

The vulnerability of the SSH and Telnet protocol implementations of the D-Link DSL6740C modem’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of SSH and Telnet protocols implemented by the microprogramming software of the D-Link DSL6740C modem lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS5.9AI score0.01325EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.3 views

The vulnerability of the SSH and Telnet protocol implementations of the D-Link DSL6740C modem’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of SSH and Telnet protocols implemented by the microprogramming software of the D-Link DSL6740C modem lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS5.9AI score0.01325EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:0 a.m.4 views

The vulnerability of the SSH and Telnet protocol implementations of the D-Link DSL6740C modem’s microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the SSH and Telnet protocols implemented by the D-Link DSL6740C modem’s microprogramming system exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute...

9CVSS5.8AI score0.01325EPSS
Exploits0References4
OSV
OSV
added 2024/11/12 7:15 p.m.8 views

CVE-2024-7516

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a...

7.1CVSS7.3AI score0.00243EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.2 views

D-Link DSL6740C 操作系统命令注入漏洞

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from an operating system command injection vulnerability, which can be exploited by a remote attacker with administrator privileges to inject and execute arbitrary system commands via specific...

7.2CVSS8.1AI score0.01325EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.2 views

D-Link DSL6740C 操作系统命令注入漏洞

The D-Link DSL6740C is a wireless VDSL router from China's AUO D-Link. The D-Link DSL6740C suffers from an operating system command injection vulnerability, which can be exploited by a remote attacker with administrator privileges to inject and execute arbitrary system commands via specific...

7.2CVSS8.1AI score0.01325EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:0 a.m.4 views

PT-2024-8170 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C affected versions not specified Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a specif...

9CVSS8.2AI score0.01325EPSS
Exploits0References18
Positive Technologies
Positive Technologies
added 2024/11/11 12:0 a.m.3 views

PT-2024-8176 · D Link · D-Link Dsl6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C modem affected versions not specified Description: The D-Link DSL6740C modem has an OS Command Injection issue, allowing remote attackers with administrator privileges to inject and execute arbitrary system commands through a...

9CVSS8.2AI score0.01325EPSS
Exploits0References17
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.3 views

D-Link DSL6740C 安全漏洞

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. A security vulnerability exists in the D-Link DSL6740C, which can be exploited by an attacker to modify arbitrary user passwords and later log in to Web, SSH, and Telnet services via certain APIs...

9.8CVSS6.9AI score0.01174EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.3 views

D-Link DSL6740C 操作系统命令注入漏洞

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from an operating system command injection vulnerability, which can be exploited by a remote attacker with administrator privileges to inject and execute arbitrary system commands via specific...

7.2CVSS8.1AI score0.01325EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:0 a.m.5 views

The vulnerability of the SSH server of Cisco Adaptive Security Appliance’s microprogrammed network interface devices allows a attacker to cause a service failure.

The vulnerability of the SSH server of the microprogrammed network interface devices in Cisco Adaptive Security Appliances ASA is related to an uncontrolled resource consumption. This vulnerability could allow a malicious actor to cause service interruptions remotely...

5.3CVSS5.4AI score0.00469EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/10/24 12:0 a.m.4 views

Tuoshi NR500-EA 安全漏洞

Tuoshi NR500-EA is a wireless router from Tuoshi, China. A security vulnerability exists in Tuoshi NR500-EA version 3.2.2543.12.18, which stems from a privilege modification vulnerability that allows an attacker to access the SSH protocol without authentication...

6.5CVSS6.8AI score0.00253EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/24 12:0 a.m.5 views

PT-2024-33113 · Shenzhen Tuoshi Network Communications Co. · Nr500-Ea

Name of the Vulnerable Software and Affected Versions: Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLIC version 3.2.2543.12.18 Description: The issue is related to incorrect access control, allowing attackers to access the SSH protocol without authenticatio...

6.5CVSS7.2AI score0.00253EPSS
Exploits0References3
OSV
OSV
added 2024/10/23 6:15 p.m.3 views

CVE-2024-20526

A vulnerability in the SSH server of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition for the SSH server of an affected device. This vulnerability is due to a logic error when an SSH session is established. A...

5.3CVSS5.8AI score0.00469EPSS
Exploits0References1
OSV
OSV
added 2024/10/23 5:15 p.m.2 views

CVE-2024-20329

A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by...

9.9CVSS6.1AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:0 a.m.4 views

The vulnerability of the Kubernetes Image Builder software lies in its use of hard-coded credentials, which allows an attacker to gain access to the virtual machine.

The vulnerability of the Kubernetes Image Builder software relates to the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the virtual machine via SSH connection and elevate their privileges to root level...

6.5CVSS7.2AI score0.01641EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.5 views

The vulnerability of the Kubernetes Image Builder software lies in its use of hard-coded credentials, which allows an attacker to gain access to the virtual machine.

The vulnerability of the Kubernetes Image Builder software relates to the use of strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the virtual machine via SSH connection and elevate their privileges to root level...

10CVSS7.3AI score0.02223EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/10/16 12:0 a.m.3 views

SUSE Manager 安全漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration, and monitoring. A security vulnerability exists in SUSE Manager that stems from insecure handling of ssh keys used to boot clients, allowing a local attacke...

6.4CVSS6.2AI score0.00147EPSS
Exploits0References2
Rows per page
Query Builder