Lucene search
K

81 matches found

OSV
OSV
added 2024/05/03 3:15 a.m.1 views

CVE-2023-41205

D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.00855EPSS
Exploits0References2
Citrix
Citrix
added 2024/01/25 12:0 a.m.6 views

Unable to create DataSet using IPv4 CIDR format using GUI

When attempting to add a dataset via the GUI AppExpert Data Sets - Add, users may encounter a failure accompanied by the error message - "Value entered is not an IPv4." Note: This error message specifically occurs when the subnet mask value n is greater than 28 a.b.c.d/n...

7AI score
Exploits0
AlmaLinux
AlmaLinux
added 2023/05/16 12:0 a.m.37 views

Moderate: dhcp security and bug fix update

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to...

6.5CVSS7AI score0.00664EPSS
Exploits0References6
AlmaLinux
AlmaLinux
added 2023/05/09 12:0 a.m.33 views

Moderate: dhcp security and enhancement update

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to...

6.5CVSS7AI score0.00664EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.8 views

SUSE CVE-2009-0692

Stack-based buffer overflow in the scriptwriteparams method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option...

10CVSS8.3AI score0.2578EPSS
Exploits9References4
CNNVD
CNNVD
added 2023/01/27 12:0 a.m.6 views

D-Link DIR-878 操作系统命令注入漏洞

The D-Link DIR-878 is a wireless router from China-based AUO D-Link. The D-Link DIR-878 DIR878FW1.30B08 firmware version suffers from an operating system command injection vulnerability that stems from its /SetNetworkSettings/SubnetMask component that allows attackers to achieve command injection...

9.8CVSS8.4AI score0.03113EPSS
Exploits1References3
AlmaLinux
AlmaLinux
added 2022/11/15 12:0 a.m.43 views

Moderate: dhcp security and enhancement update

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to...

6.8CVSS7.2AI score0.0325EPSS
Exploits0References4
OSV
OSV
added 2022/05/10 2:15 p.m.4 views

CVE-2022-28896

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

9.8CVSS7.3AI score0.03598EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/05/10 12:0 a.m.6 views

PT-2022-19298 · D Link · Dir-882

Name of the Vulnerable Software and Affected Versions: D-Link DIR882 version DIR882A1 FW130B06 Description: A command injection issue exists in the /setnetworksettings/SubnetMask component, allowing attackers to escalate privileges to root by sending a crafted payload. Recommendations: For versio...

10CVSS9.5AI score0.03598EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/09/06 12:0 a.m.18 views

ISC BIND Winsock API Vulnerability (CVE-2013-6230) - Windows

ISC BIND is prone to a vulnerability in the Winsock API. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

6.8CVSS6.5AI score0.05706EPSS
Exploits0References1
AlmaLinux
AlmaLinux
added 2021/06/09 9:19 a.m.23 views

Important: dhcp security update

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. The dhcp packages provide a relay agent and ISC DHCP service required to...

3.3CVSS0.9AI score0.06118EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2020/10/22 12:0 a.m.2 views

The vulnerability of Moxa EDR-810 microcontroller software lies in the lack of protection for service data. This allows attackers to disclose sensitive information such as the LAN IP address, model name, MAC address, subnet mask, and server configuration settings.

The vulnerability of Moxa EDR-810 microcontroller-based software lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information such as the LAN IP address, model name, MAC address, subnet mask, and...

7.8CVSS5.4AI score
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2020/04/08 12:0 a.m.9 views

ZSQL: IP Address Whitelist

The IP address whitelist is configured by setting the TCPINVITEDNODES parameter. After IP address whitelist/blacklist checking is enabled and the IP address whitelist is configured, only whitelisted clients can access the database. Such a whitelist allows for IPv4 and IPv6 addresses, as well as a...

7.3AI score
Exploits0References1
OpenVAS
OpenVAS
added 2020/04/08 12:0 a.m.4 views

ZSQL: IP Address Blacklist

The IP address blacklist is configured by setting the TCPEXCLUDEDNODES parameter. After IP address whitelist/blacklist checking is enabled and the IP address blacklist is configured, the blacklisted clients cannot access the database. Such a blacklist allows for IPv4 and IPv6 addresses, as well a...

7.3AI score
Exploits0References1
OSV
OSV
added 2020/03/11 11:15 p.m.2 views

CVE-2019-5174

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted...

7.8CVSS7.1AI score0.01358EPSS
Exploits1References1
Citrix
Citrix
added 2019/09/25 12:0 a.m.9 views

How to change subnet mask of NSIP on NetScaler

How to change the subnet mask of NetScaler management IP address when not using Clustering...

7.1AI score
Exploits0
NVD
NVD
added 2019/05/07 7:29 p.m.7 views

CVE-2018-20503

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...

6.1CVSS6.1AI score0.03904EPSS
Exploits5References3
ATTACKERKB
ATTACKERKB
added 2018/10/10 6:29 p.m.2 views

Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash

An improper input validation weakness in the device control daemon process dcd of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not...

5.9CVSS5.6AI score0.01089EPSS
Exploits0References3Affected Software1
Packet Storm
Packet Storm
added 2018/04/19 12:0 a.m.151 views

Lutron Quantum 3.2.243 Information Disclosure

Exploit Title: Login bypass and data leak - Lutron Quantum 2.0 - 3.2.243 firmware Date: 20-03-2018 Exploit Author: David Castro Contact: https://twitter.com/SadFud75 Vendor Homepage: http://www.lutron.com Software Link:...

7.6AI score0.14576EPSS
Exploits5
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.33 views

ISC DHCP 'dhclient' 'script_write_params()' - Stack Buffer Overflow Vulnerability

No description provided by source. / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in...

10CVSS0.3AI score0.2578EPSS
Exploits9
Rows per page
Query Builder