Lucene search
+L

1769 matches found

VulnCheck KEV
VulnCheck KEV
•added 2020/11/06 12:00 a.m.•9 views

VulnCheck KEV: CVE-2020-15893

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet...

9.8CVSS7AI score0.20856EPSS
SaveIn wildExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/11/06 12:00 a.m.•30 views

EulerOS Virtualization 3.0.6.6 : wpa_supplicant (EulerOS-SA-2020-2477)

According to the version of the wpasupplicant package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request...

7.8CVSS6.8AI score0.15193EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2020/11/05 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for wpa_supplicant (EulerOS-SA-2020-2477)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.15193EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
•added 2020/10/30 12:00 a.m.•40 views

EulerOS 2.0 SP5 : wpa_supplicant (EulerOS-SA-2020-2276)

According to the version of the wpasupplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a deliver...

7.8CVSS6.8AI score0.15193EPSS
SaveExploits4References2
NVD
NVD
•added 2020/10/19 7:15 p.m.•30 views

CVE-2020-24375

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

6.5CVSS0.01076EPSS
SaveExploits1References2
Prion
Prion
•added 2020/10/19 7:15 p.m.•33 views

Design/Logic Flaw

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

4.3CVSS6.5AI score0.01076EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2020/10/19 6:08 p.m.•38 views

CVE-2020-24375

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

6.5AI score0.01076EPSS
SaveExploits1References2
CVE
CVE
•added 2020/10/19 6:08 p.m.•66 views

CVE-2020-24375

The CVE describes a DNS rebinding vulnerability in the UPnP MediaServer implementation of Freebox Server prior to version 4.2.3. The affected component is Freebox Server’s UPnP MediaServer; the underlying issue is DNS rebinding that could allow an attacker on the local network to access internal ...

6.5CVSS6.4AI score0.01076EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/19 12:00 a.m.•6 views

CVE-2020-24375: Authentication Bypass by Spoofing

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

6.5CVSS5.8AI score0.01076EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/10/19 12:00 a.m.•3 views

PT-2020-15717

Name of the Vulnerable Software and Affected Versions Freebox Server versions prior to 4.2.3 Description A DNS rebinding issue exists in the UPnP MediaServer implementation. Recommendations For versions prior to 4.2.3, update to version 4.2.3 or later to resolve the issue...

6.5CVSS0.01076EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2020/10/05 12:00 a.m.•28 views

FreeBSD : upnp -- denial of service (crash) (a23871f6-059b-11eb-8758-e0d55e2a8bf9)

CVE mitre reports : Portable UPnP SDK aka libupnp 1.12.1 and earlier allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c...

7.5CVSS7.1AI score0.03469EPSS
SaveExploits0References4
NVD
NVD
•added 2020/09/16 8:15 p.m.•27 views

CVE-2020-24376

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

9.6CVSS0.00997EPSS
SaveExploits0References2
NVD
NVD
•added 2020/09/16 8:15 p.m.•28 views

CVE-2020-24373

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

8.8CVSS0.00535EPSS
SaveExploits1References2
Prion
Prion
•added 2020/09/16 8:15 p.m.•21 views

Cross site request forgery (csrf)

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

6.8CVSS8.6AI score0.00535EPSS
SaveExploits1References2Affected Software5
Prion
Prion
•added 2020/09/16 8:15 p.m.•21 views

Design/Logic Flaw

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

6.8CVSS9.1AI score0.00997EPSS
SaveExploits0References2Affected Software5
CVE
CVE
•added 2020/09/16 8:00 p.m.•77 views

CVE-2020-24376

CVE-2020-24376 describes a DNS rebinding vulnerability in the UPnP Internet Gateway Device (IGD) implementations of Freebox v5 prior to 1.5.29 and Freebox Server prior to 4.2.3. The connected records confirm the affected products and versions and reiterate the same vulnerability description. No d...

9.6CVSS9.2AI score0.00997EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2020/09/16 8:00 p.m.•82 views

CVE-2020-24373

CVE-2020-24373 affects Freebox Server's UPnP MediaServer (prior to version 4.2.3). The vulnerability is a CSRF issue in the UPnP MediaServer implementation that could be triggered by an attacker. The available connected documents confirm the affected software (Freebox Server) and vulnerable compo...

8.8CVSS8.6AI score0.00535EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/09/16 8:00 p.m.•37 views

CVE-2020-24373

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

8.7AI score0.00535EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•6 views

CVE-2020-24373: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

8.8CVSS5.8AI score0.00535EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/16 12:00 a.m.•5 views

CVE-2020-24376: Improper Input Validation

A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...

9.6CVSS5.8AI score0.00997EPSS
SaveExploits0References2
Rows per page
Query Builder