Lucene search
+L

426 matches found

CVE
CVE
added 2021/04/22 7:37 p.m.58 views

CVE-2021-0249

CVE-2021-0249 is a buffer overflow in Juniper Networks Junos OS Packet Forwarding Engine (PFE) on SRX Series devices. Affected releases include SRX Series: 15.1X49 prior to 15.1X49-D190; 17.4 prior to 17.4R2-S9; 17.4R3 and later prior to 18.1R3-S9; 18.2 prior to 18.2R3-S1; 18.3 prior to 18.3R2-S3...

10CVSS9.3AI score0.01839EPSS
SaveExploits0References1Affected Software1
ICS
ICS
added 2021/02/16 12:00 a.m.59 views

Rockwell Automation Allen-Bradley Micrologix 1100

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley MicroLogix 1100 Vulnerability: Improper Handling of Length Parameter Inconsistency 2. RISK EVALUATION Successful exploitation of this vulnerability...

7.5CVSS7.8AI score0.04584EPSS
SaveExploits0References4
NVD
NVD
added 2020/11/27 6:15 p.m.37 views

CVE-2020-25014

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

9.8CVSS9.9AI score0.0444EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/27 6:15 p.m.20 views

Stack overflow

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

7.5CVSS9.8AI score0.0444EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2020/11/27 5:18 p.m.101 views

CVE-2020-25014

CVE-2020-25014 affects Zyxel UTM and VPN gateways (firmware V4.30–V4.55) with a stack-based buffer overflow in fbwifi_continue.cgi that enables remote unauthenticated arbitrary code execution via a crafted HTTP packet. Connected sources corroborate the affected product scope and vulnerable compon...

9.8CVSS9.8AI score0.0444EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/11/27 5:18 p.m.40 views

CVE-2020-25014

A stack-based buffer overflow in fbwificontinue.cgi on Zyxel UTM and VPN series of gateways running firmware version V4.30 through to V4.55 allows remote unauthenticated attackers to execute arbitrary code via a crafted http packet...

9.9AI score0.0444EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2020/11/27 12:00 a.m.12 views

Zyxel UTM and Zyxel Gateway VPN series Buffer Error Vulnerability

Welkin Technology Zyxel UTM is a unified threat management appliance from Welkin Technology, China. Welkin Technologies Zyxel Gateway VPN series is a series of VPN routers from Welkin Technologies, China that provide secure access. VPNs supported by this router include IPSec, L2TP over IPSec, PPT...

9.8CVSS8.1AI score0.0444EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/11/27 12:00 a.m.9 views

PT-2020-15889 · Zyxel · Zyxel Utm/Vpn

Name of the Vulnerable Software and Affected Versions: Zyxel UTM and VPN series of gateways versions V4.30 through V4.55 Description: A stack-based buffer overflow in fbwifi continue.cgi allows remote unauthenticated attackers to execute arbitrary code via a crafted HTTP packet. This issue affect...

9.8CVSS8.8AI score0.0444EPSS
SaveExploits0References5
NVD
NVD
added 2020/09/25 4:23 a.m.31 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11...

10CVSS0.96693EPSS
SaveExploits9References6
OSV
OSV
added 2020/09/25 4:23 a.m.5 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11...

9.8CVSS8.1AI score0.96693EPSS
SaveExploits9References6
Prion
Prion
added 2020/09/25 4:23 a.m.22 views

Remote code execution

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11...

10CVSS9.6AI score0.96693EPSS
SaveExploits9References5Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/25 12:00 a.m.6 views

PT-2020-6848 · Sophos · Sophos Sg Utm

Name of the Vulnerable Software and Affected Versions: Sophos SG UTM versions prior to v9.705 MR5 Sophos SG UTM versions prior to v9.607 MR7 Sophos SG UTM versions prior to v9.511 MR11 Description: A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. The vulnerability is...

10CVSS10AI score0.96693EPSS
SaveExploits9References26
Vulnrichment
Vulnrichment
added 2020/09/25 12:00 a.m.18 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11...

9.8AI score0.96693EPSS
SaveExploits9References5
ATTACKERKB
ATTACKERKB
added 2020/09/25 12:00 a.m.17 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 Recent assessments: wvu-r7 at November 02, 2021 7:12pm UTC reported: See the other topic. Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

10CVSS7.7AI score0.96693EPSS
SaveIn wildExploits9References6
Cvelist
Cvelist
added 2020/09/25 12:00 a.m.85 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11...

9.8AI score0.96693EPSS
SaveExploits9References5
CVE
CVE
added 2020/09/25 12:00 a.m.1040 views

CVE-2020-25223

CVE-2020-25223 is a remote code execution vulnerability in the WebAdmin interface of Sophos SG UTM, exploitable without authentication. The flaw allows an unauthenticated attacker to run arbitrary commands as root via a SID-based command injection in WebAdmin. Affected versions are Sophos SG UTM ...

10CVSS9.6AI score0.96693EPSS
SaveIn wildExploits9References6Affected Software1
NCSC
NCSC
added 2020/09/25 12:00 a.m.6 views

Vulnerability fixed in Sophos SG UTM

A vulnerability has been fixed in Sophos SG UTM. The vulnerability allows a remote malicious person to execute arbitrary code execute arbitrary code with user privileges. It is good practice to access the management interface to be exposed on a local network to which only administrators have acce...

10CVSS7.4AI score0.96693EPSS
SaveExploits9
ATTACKERKB
ATTACKERKB
added 2020/09/25 12:00 a.m.56 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 Recent assessments: wvu-r7 at August 26, 2021 2:01am UTC reported: Please see theAtredis writeup for root cause analysis. CVE-2020-25223 has high attacker value and...

10CVSS9.8AI score0.96693EPSS
SaveIn wildExploits9References6
Packet Storm
Packet Storm
added 2020/09/22 12:00 a.m.300 views

Comodo Unified Threat Management Web Console 2.7.0 Remote Code Execution

Exploit Title: Comodo Unified Threat Management Web Console 2.7.0 - Remote Code Execution Date: 2018-08-15 Exploit Author: Milad Fadavvi Author's LinkedIn: https://www.linkedin.com/in/fadavvi/ Vendor Homepage: https://www.comodo.com/ Version: Releases before 2.7.0 & 1.5.0 Tested on:...

7.5CVSS0.83912EPSS
SaveExploits4
Metasploit
Metasploit
added 2020/09/18 12:00 a.m.215 views

Sophos UTM WebAdmin SID Command Injection

This module exploits an SID-based command injection in Sophos UTM's WebAdmin interface to execute shell commands as the root user. Module Options msf use exploit/linux/http/sophos/utmwebadminsidcmdinjection msf undefinedutmwebadminsidcmdinjection show actions ...actions... msf...

10CVSS8.8AI score0.96693EPSS
SaveExploits9
Rows per page
Query Builder