Lucene search
+L

16 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 3:16 a.m.•21 views

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

6.1CVSS6.8AI score0.00473EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:28 a.m.•16 views

CVE-2013-3072

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http:///apply.cgi?/hddusrsetup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal...

9.8CVSS7AI score0.02113EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:52 a.m.•15 views

CVE-2017-15885

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...

6.1CVSS6.2AI score0.02352EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2024/11/12 12:00 a.m.•4 views

PT-2024-34868

Name of the Vulnerable Software and Affected Versions SecuSUITE versions 5.0.420 and earlier Description A code injection issue in the SecuSUITE Server Web Administration Portal could allow an attacker to inject script commands or other executable content into the server, potentially running with...

7.3CVSS5.8AI score0.0024EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/12 12:00 a.m.•2 views

CVE-2024-51721: Improper Link Resolution Before File Access

A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege...

7.3CVSS5.9AI score0.0024EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/03/07 12:00 a.m.•71 views

AXIS 207W Network Camera XSS Vulnerability (Feb 2023)

AXIS 207W network camera devices are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.2AI score0.00473EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/02/21 4:15 p.m.•10 views

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

6.1CVSS6.6AI score0.00473EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/21 4:15 p.m.•33 views

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

6.1CVSS6.2AI score0.00473EPSS
SaveExploits1References1
Prion
Prion
•added 2023/02/21 4:15 p.m.•24 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

5.8CVSS6.2AI score0.00473EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/02/21 12:00 a.m.•42 views

CVE-2023-22984

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

6.3AI score0.00473EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•4 views

CVE-2023-22984: Improper Neutralization of Input During Web Page Generation

A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL...

6.1CVSS6.3AI score0.00473EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/11/14 6:11 p.m.•33 views

CVE-2013-3072

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http:///apply.cgi?/hddusrsetup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal...

9.5AI score0.02113EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2019/11/14 12:00 a.m.•4 views

PT-2019-6904

Name of the Vulnerable Software and Affected Versions NETGEAR Centria WNDR4700 Firmware version 1.0.0.34 Description An Authentication Bypass issue exists, allowing any user to access the web administration portal without a password by visiting a specific URL. The affected URL is...

9.8CVSS0.02113EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/14 12:00 a.m.•3 views

CVE-2013-3072: Improper Authentication

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http:// /apply.cgi?/hddusrsetup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal...

9.8CVSS8.2AI score0.02113EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/25 12:00 a.m.•4 views

CVE-2017-15885: Improper Neutralization of Input During Web Page Generation

Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the confLayoutOwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214...

6.1CVSS6.7AI score0.00609EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/10/25 12:00 a.m.•1 views

PT-2017-14263

Name of the Vulnerable Software and Affected Versions Axis 2100 Network Camera version 2.03 Description The issue concerns a Reflected XSS in the web administration portal. An attacker can execute arbitrary JavaScript via the conf Layout OwnTitle parameter to the "view/view.shtml" endpoint...

6.1CVSS0.00609EPSS
SaveExploits1References3
Rows per page
Query Builder