Lucene search
+L

16024 matches found

osv_cve
osv_cve
•added 2024/05/04 2:16 p.m.•24 views

CVE-2023-27283

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...

5.3CVSS5.9AI score0.00471EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/04 12:00 a.m.•23 views

PT-2024-12126 · Ibm · Ibm Aspera Orchestrator

Name of the Vulnerable Software and Affected Versions: IBM Aspera Orchestrator version 4.0.1 Description: The issue allows a remote attacker to enumerate usernames due to observable response discrepancies. Recommendations: For IBM Aspera Orchestrator version 4.0.1, upgrade the affected component ...

5.3CVSS5.9AI score0.00471EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/04 12:00 a.m.•13 views

CVE-2023-27283: Observable Response Discrepancy

IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545...

5.3CVSS5.9AI score0.00471EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/03 6:15 p.m.•16 views

CVE-2021-20556

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181...

5.3CVSS5.9AI score0.00463EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/03 6:15 p.m.•26 views

CVE-2021-20556

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181...

5.3CVSS5.5AI score0.00463EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/03 5:31 p.m.•34 views

CVE-2021-20556 IBM Cognos Controller information disclosure

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181...

5.3CVSS6.3AI score0.00463EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/05/03 3:15 a.m.•11 views

CVE-2023-44421

D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8CVSS8.3AI score0.01707EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2024/05/03 2:15 a.m.•10 views

CVE-2023-35751

D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS8.5AI score0.0108EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/05/03 2:15 a.m.•9 views

CVE-2023-35729

D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerabilit...

8.8CVSS8.5AI score0.0108EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2024/05/03 2:15 a.m.•13 views

CVE-2023-35725

D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS8.5AI score0.01094EPSS
SaveExploits0References3
NVD
NVD
•added 2024/05/03 2:15 a.m.•35 views

CVE-2023-34276

D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this...

8CVSS7.2AI score0.0176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/03 2:13 a.m.•32 views

CVE-2023-44421 D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability

D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8CVSS8.2AI score0.01707EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/03 1:57 a.m.•53 views

CVE-2023-35735 D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS9.2AI score0.0108EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/03 1:57 a.m.•25 views

CVE-2023-34276 D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability

D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this...

6.8CVSS7.5AI score0.0176EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•21 views

D-Link DAP-2622 security vulnerability

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS9.1AI score0.0108EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/03 12:00 a.m.•8 views

PT-2024-10873

Name of the Vulnerable Software and Affected Versions IBM Cognos Controller versions 10.4.1 through 11.0.0 Description The issue allows a remote user to enumerate usernames due to differentiating error messages on existing usernames. Recommendations For versions 10.4.1 through 11.0.0, update to a...

5.3CVSS5.8AI score0.00463EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•10 views

CVE-2021-20556: Observable Response Discrepancy

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181...

5.3CVSS5.9AI score0.00463EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•22 views

D-Link DAP-2622 security vulnerability

The D-Link DAP-2622 is a wireless access point Access Point device from China's AUO D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Setup Wireless Information Authentication username...

8.8CVSS8.6AI score0.0108EPSS
SaveExploits0References3
NVD
NVD
•added 2024/05/02 5:15 p.m.•24 views

CVE-2024-25290

An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

8CVSS7.5AI score0.00717EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/02 12:00 a.m.•12 views

PT-2024-20864 · Casa Systems · Casa Systems Nl1901Acv

Name of the Vulnerable Software and Affected Versions: Casa Systems NL1901ACV version R6B032 Description: An issue allows a remote attacker to execute arbitrary code via the userName parameter of the add function. Recommendations: For Casa Systems NL1901ACV version R6B032, avoid using the userNam...

8CVSS7.9AI score0.00717EPSS
SaveExploits0References3
Rows per page
Query Builder