Lucene search
+L

17437 matches found

OSV
OSV
added 2024/10/31 6:15 p.m.10 views

UBUNTU-CVE-2024-51482

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65...

9.9CVSS5.9AI score0.34979EPSS
SaveExploits8References4
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.9 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure by sending a specially...

8CVSS6.3AI score0.00329EPSS
SaveExploits0References3Affected Software24
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.11 views

The vulnerability in the wlogin.cgi web interface of DrayTek Vigor routing software allows attackers to perform cross-site scripting attacks.

The vulnerability of the wlogin.cgi web interface script of the DrayTek Vigor router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5CVSS5.5AI score0.00283EPSS
SaveExploits0References3Affected Software24
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.15 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

6.8CVSS6.2AI score0.00462EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.11 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software-enabled routers allows a hacker to modify settings or cause service failures.

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the writing and reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to modify settings remotely or cause service failures...

8CVSS6AI score0.00342EPSS
SaveExploits0References3Affected Software24
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.11 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00376EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.15 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00292EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.12 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network administration allows a perpetrator to increase their privileges.

The vulnerability in the web-based management interface of Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS5.5AI score0.00492EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.18 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network administration allows a perpetrator to execute cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow attackers to execute cross-site scripting...

5.5CVSS5.4AI score0.00309EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center (formerly known as Cisco Firepower Management Center) relates to the lack of protective measures for the SQL query structure, allowing an attacker to execute arbitrary code.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remote...

8.5CVSS6.1AI score0.00442EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.13 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

6.8CVSS6.2AI score0.00443EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.17 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

6.8CVSS6.2AI score0.00443EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.15 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web interface of DrayTek Vigor microprogramming software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.5AI score0.0024EPSS
SaveExploits0References3Affected Software24
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.19 views

The vulnerability in the web interface of the Cisco Identity Services Engine, a platform for managing network policies, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine management platform for network policies relates to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a special...

6.8CVSS5.5AI score0.00287EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.11 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00309EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.12 views

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00309EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.13 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network management allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.5CVSS6AI score0.00442EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/31 12:00 a.m.11 views

PT-2024-7817 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: FileManager affected versions not specified Description: The vulnerability in the FileManager web interface is related to deficiencies in the deserialization mechanism. Exploitation of this issue may allow a remote attacker to execute arbitra...

7.1CVSS7.8AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.11 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure by sending a specially...

8CVSS6.3AI score0.00328EPSS
SaveExploits0References4Affected Software24
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.22 views

The vulnerability of the ft_payloads_dns() function in the web interface of the DrayTek Vigor router software allows a hacker to induce a service failure.

The vulnerability of the ftpayloadsdns function in the web interface of the DrayTek Vigor router software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.2AI score0.00892EPSS
SaveExploits0References3Affected Software24
Rows per page
Query Builder