Lucene search
K

27 matches found

Vulnrichment
Vulnrichment
added 2026/04/26 7:15 a.m.1 views

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.00021EPSS
Exploits0References4
CVE
CVE
added 2026/04/26 7:15 a.m.6 views

CVE-2026-7026

The CVE concerns D-Link DGS-3420 firmware 1.50.018 with a cross-site scripting vulnerability in the System Information Settings Page, caused by manipulation of the System Name argument. The issue allows remote exploitation and the exploit has been publicly disclosed. Supported metrics indicate CV...

6.8CVSS3.8AI score0.00021EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/26 7:15 a.m.30 views

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS0.00021EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.2 views

PT-2026-35207

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.00021EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/26 12:0 a.m.6 views

D-Link DGS-3420 跨站脚本漏洞

The D-Link DGS-3420 is a managed Gigabit Ethernet switch designed for enterprise networks by D-Link Corporation. The version 1.50.018 of the D-Link DGS-3420 contains a cross-site scripting vulnerability. This vulnerability arises from improper handling of the System Name parameter in the System...

6.8CVSS5.6AI score0.00021EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 8:33 p.m.2 views

CVE-2021-37379

Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

5.4CVSS6.3AI score0.00289EPSS
Exploits1References1
NVD
NVD
added 2023/02/03 6:15 p.m.8 views

CVE-2021-37379

Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

5.4CVSS5.4AI score0.00289EPSS
Exploits1References1
NVD
NVD
added 2023/02/03 6:15 p.m.8 views

CVE-2021-37377

Cross Site Scripting XSS vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates...

5.4CVSS5.4AI score0.00289EPSS
Exploits1References1
OSV
OSV
added 2023/02/03 6:15 p.m.4 views

CVE-2021-37378

Cross Site Scripting XSS vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

5.4CVSS6AI score
Exploits0References1
NVD
NVD
added 2023/02/03 6:15 p.m.9 views

CVE-2021-37378

Cross Site Scripting XSS vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

5.4CVSS5.4AI score0.00289EPSS
Exploits1References1
OSV
OSV
added 2023/02/03 6:15 p.m.2 views

CVE-2021-37373

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

5.4CVSS6AI score0.0018EPSS
Exploits1References1
OSV
OSV
added 2023/02/03 6:15 p.m.3 views

CVE-2021-37376

Cross Site Scripting XSS vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving...

5.4CVSS6AI score
Exploits0References2
NVD
NVD
added 2023/02/03 6:15 p.m.11 views

CVE-2021-37373

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

5.4CVSS5.4AI score0.0018EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/02/03 12:0 a.m.7 views

PT-2023-12313 · Teradek · Bond Pro +2

Name of the Vulnerable Software and Affected Versions: Teradek Bond, Bond 2 and Bond Pro versions 7.3.x and earlier Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. The vendor states that the...

5.4CVSS6.9AI score0.00234EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/02/03 12:0 a.m.17 views

CVE-2021-37373

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

5.6AI score0.0018EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/02/03 12:0 a.m.5 views

Teradek Brik 跨站脚本漏洞

Teradek Brik is a wireless monitor from Teradek. A security vulnerability exists in Teradek Brik version 7.2.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

5.4CVSS6.3AI score0.00289EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/02/03 12:0 a.m.1 views

Teradek Clip 跨站脚本漏洞

Teradek Clip is Teradek's video signal transmitter for drones with encoding and wireless signal transmission. A security vulnerability exists in Teradek Clip. An attacker could use this vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

5.4CVSS6.3AI score0.0018EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/02/03 12:0 a.m.4 views

Teradek Cube 跨站脚本漏洞

Teradek Cube is a video decoder from Teradek. A security vulnerability exists in Teradek Cube version 7.3.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

5.4CVSS6.3AI score0.00289EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/02/03 12:0 a.m.11 views

CVE-2021-37374

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

5.6AI score0.0018EPSS
Exploits1References1
CVE
CVE
added 2023/02/03 12:0 a.m.41 views

CVE-2021-37373

Teradek Slice (1st generation) firmware 7.3.x and earlier is vulnerable to a Cross Site Scripting (XSS) flaw in the Friendly Name field of System Information Settings. The root cause is improper handling of input in that field, enabling an attacker to execute arbitrary code remotely. Exploitation...

5.4CVSS5.4AI score0.0018EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder