CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8511 matches found

OSV•added 2024/09/03 3:15 a.m.•8 views

CVE-2024-42061

A reflected cross-site scripting XSS vulnerability in the CGI program "dynamicscript.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN seri...

6.1CVSS5.7AI score0.00312EPSS

SaveExploits0References1

NVD•added 2024/09/03 3:15 a.m.•49 views

CVE-2024-42061

6.1CVSS0.00312EPSS

SaveExploits0References1

OSV•added 2024/09/03 2:15 a.m.•8 views

CVE-2024-42059

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50W series firmware versions from V5.00 through V5.38, and USG20W-VPN series firmware versions from V5.00...

7.2CVSS5.9AI score0.01339EPSS

SaveExploits0References1

NVD•added 2024/09/03 2:15 a.m.•33 views

CVE-2024-42059

7.2CVSS0.01339EPSS

SaveExploits0References1

NVD•added 2024/09/03 2:15 a.m.•32 views

CVE-2024-42060

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS0.01339EPSS

SaveExploits0References1

NVD•added 2024/09/03 2:15 a.m.•34 views

CVE-2024-42057

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16...

8.1CVSS0.0132EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:59 a.m.•71 views

CVE-2024-42061

CVE-2024-42061 is a documented reflected cross-site scripting (XSS) vulnerability in Zyxel devices. The CGI program \

6.1CVSS5.2AI score0.00312EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2024/09/03 1:59 a.m.•18 views

CVE-2024-42061

6.1CVSS5.2AI score0.00312EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:54 a.m.•69 views

CVE-2024-42060

CVE-2024-42060 is a post-authentication command-injection vulnerability in Zyxel devices, affecting firmware ranges: ATP v4.32–5.38 , USG FLEX v4.50–5.38 , USG FLEX 50(W) v4.16–5.38 , and USG20(W)-VPN v4.16–5.38 . An authenticated administrator can upload a crafted internal user agreement file to...

7.2CVSS7.7AI score0.01339EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/09/03 1:54 a.m.•40 views

CVE-2024-42060

7.2CVSS0.01339EPSS

SaveExploits0References1

Vulnrichment•added 2024/09/03 1:54 a.m.•16 views

CVE-2024-42060

7.2CVSS7.6AI score0.01339EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 1:51 a.m.•31 views

CVE-2024-42059

7.2CVSS0.01339EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:51 a.m.•72 views

CVE-2024-42059

CVE-2024-42059 affects Zyxel devices including ATP series firmware V5.00–V5.38, USG FLEX series V5.00–V5.38, USG FLEX 50(W) V5.00–V5.38, and USG20(W)-VPN V5.00–V5.38. The issue is a post-authentication command-injection vulnerability in the FTP handling that allows an authenticated administrator ...

7.2CVSS7.7AI score0.01339EPSS

SaveExploits0References1Affected Software1

CVE•added 2024/09/03 1:47 a.m.•61 views

CVE-2024-42058

CVE-2024-42058 is a null pointer dereference vulnerability in Zyxel devices: Zyxel ATP firmware v4.32–v5.38, USG FLEX v4.50–v5.38, USG FLEX 50(W) v5.20–v5.38, and USG20(W)-VPN v5.20–v5.38. It allows an unauthenticated attacker to cause DoS by sending crafted packets, with network attack vector an...

7.5CVSS7.1AI score0.00621EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2024/09/03 1:47 a.m.•17 views

CVE-2024-42058

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V5.20 through V5.38, and USG20W-VPN series firmware versions from V5.20 through V5.38 cou...

7.5CVSS7AI score0.00621EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:43 a.m.•115 views

CVE-2024-42057

CVE-2024-42057 affects Zyxel Zyxel ATP and USG FLEX/USG FLEX 50(W)/USG20(W)-VPN firmware from V4.16–V5.38 (and V4.32–V5.38 for ATP/USG), with an unauthenticated OS command injection via a crafted username. The root cause is in the IPSec VPN feature; successful exploitation requires User-Based-PSK...

8.1CVSS8.2AI score0.0132EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2024/09/03 1:43 a.m.•41 views

CVE-2024-42057

8.1CVSS8.1AI score0.0132EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 1:43 a.m.•32 views

CVE-2024-42057

8.1CVSS0.0132EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 1:28 a.m.•31 views

CVE-2024-6343

A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16 through...

4.9CVSS0.00605EPSS

SaveExploits0References1

Vulnrichment•added 2024/09/03 1:28 a.m.•17 views

CVE-2024-6343

4.9CVSS7.2AI score0.00605EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by