Lucene search
+L

51 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•36 views

EUVD-2016-2568

Malware in sbrugna...

7.8CVSS7.3AI score0.03045EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-18166

Malicious code in bioql PyPI...

7.5CVSS7AI score0.00753EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/08/19 12:00 a.m.•37 views

Cisco Small Business SPA300/SPA500 Web Interface Command Execution

The vulnerability of the web interface of Cisco Small Business SPA300 and SPA500 microprogramming software lies in the copying of input data into memory without checking its size. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary commands on the basic...

10CVSS6.2AI score0.066EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/08/19 12:00 a.m.•31 views

Cisco SPA300/SPA500 DoS

The vulnerability in the web interface for managing Microprogramming software in Cisco Small Business SPA300 and SPA500 phones is related to the copying of input data into the buffer without checking its size. Exploiting this vulnerability can allow an attacker, operating remotely, to cause servi...

7.8CVSS5.7AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/08/19 12:00 a.m.•31 views

Cisco SPA300/SPA500 DoS

The vulnerability in the web interface for managing Microprogramming software in Cisco Small Business SPA300 and SPA500 phones is related to the copying of input data into the buffer without checking its size. Exploiting this vulnerability can allow an attacker, operating remotely, to cause servi...

7.8CVSS5.7AI score0.00753EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/08/08 12:00 a.m.•23 views

Cisco Small Business SPA300/SPA500 Web Interface Command Execution

The vulnerability of the web interface of Cisco Small Business SPA300 and SPA500 microprogramming software lies in the copying of input data into memory without checking its size. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary commands on the basic...

10CVSS6.2AI score0.07225EPSS
SaveExploits0References2
NVD
NVD
•added 2024/08/07 5:15 p.m.•53 views

CVE-2024-20450

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

9.8CVSS0.07225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/07 4:48 p.m.•61 views

CVE-2024-20451

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly. These vulnerabilities exist because...

7.5CVSS0.00753EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/07 4:47 p.m.•32 views

CVE-2024-20454

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

9.8CVSS8.6AI score0.066EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/07 4:46 p.m.•55 views

CVE-2024-20450

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

9.8CVSS0.07225EPSS
SaveExploits0References1
EUVD
EUVD
•added 2024/08/07 4:46 p.m.•26 views

EUVD-2024-18165

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

9.8CVSS8AI score0.07225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/07 12:00 a.m.•10 views

PT-2024-5605

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 Series IP Phones affected versions not specified Cisco Small Business SPA500 Series IP Phones affected versions not specified Description The issue is related to a buffer overflow vulnerability in the web-based...

9.8CVSS0.066EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/08/07 12:00 a.m.•6 views

PT-2024-5606

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 and SPA500 affected versions not specified Description The issue is related to a buffer overflow vulnerability in the web management interface of the software, which can be exploited by sending specially crafted HTT...

7.8CVSS6.2AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/08/07 12:00 a.m.•21 views

PT-2024-5616 · Cisco · Cisco Small Business Spa500 +1

Name of the Vulnerable Software and Affected Versions: Cisco Small Business SPA300 and SPA500 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the web interface of the Cisco Small Business SPA300 and SPA500 IP phone software. This vulnerabili...

10CVSS8.3AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/08/07 12:00 a.m.•9 views

PT-2024-5607

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 Series IP Phones affected versions not specified Cisco Small Business SPA500 Series IP Phones affected versions not specified Description The issue is related to the web-based management interface of the affected...

7.8CVSS0.00753EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•13 views

CVE-2024-20451: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly. These vulnerabilities exist because...

7.5CVSS7.3AI score0.00753EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•10 views

CVE-2024-20454: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

9.8CVSS9AI score0.066EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/07 12:00 a.m.•9 views

PT-2024-5449

Name of the Vulnerable Software and Affected Versions Cisco Small Business SPA300 Series IP Phones affected versions not specified Cisco Small Business SPA500 Series IP Phones affected versions not specified Description The issue is related to a buffer overflow vulnerability in the web-based...

10CVSS0.07225EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/07 12:00 a.m.•11 views

CVE-2024-20450: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges...

9.8CVSS9AI score0.07225EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/10/24 12:00 a.m.•22 views

Cisco SPA300 and SPA500 Series IP Phones Cross-Site Request Forgery Vulnerability

The Cisco SPA300 and SPA500 Series IP Phones are both IP phone products from Cisco USA. A cross-site request forgery vulnerability exists in the Cisco SPA300 and SPA500 Series IP Phones that stems from a lack of cross-site request forgery protection in the program. A remote attacker could exploit...

8.8CVSS6.9AI score0.00982EPSS
SaveExploits0References1
Rows per page
Query Builder