Lucene search
+L

850 matches found

CVE
CVE
added 2026/04/08 5:53 p.m.25 views

CVE-2026-30817

CVE-2026-30817 describes an external configuration control vulnerability in the OpenVPN module of TP-Link AX53 (v1.0) that could allow an authenticated adjacent attacker to read arbitrary files when processing a malicious configuration file. The effect is potential unauthorized access to sensitiv...

6.8CVSS6AI score0.00343EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/08 5:53 p.m.34 views

CVE-2026-30816 Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

6.8CVSS0.00286EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/08 5:52 p.m.33 views

CVE-2026-30815 OS Command Injection Vulnerability in OpenVPN Module in TP-Link AX53

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to insufficient input validation. Successful exploitation may allow modificatio...

8.5CVSS0.01569EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/08 5:52 p.m.33 views

CVE-2026-30814

Affects TP-Link Archer AX53 v1.0. The vulnerability is a stack-based buffer overflow in the tmpServer module, allowing an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a crafted configuration file. Exploitation may crash the device and ...

8CVSS6.6AI score0.00418EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.10 views

PT-2026-29851

A newly disclosed stack buffer overflow CVE-2026-34124 affects specific TP-Link devices within their HTTP server, potentially leading to Denial of Service DoS. The vulnerability is triggered by malformed HTTP GET requests, with the original summary also indicating a similar POST body overflow...

7.1CVSS5.9AI score0.00296EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/03/27 12:00 a.m.5 views

Cisco Nexus 3000 9000 Series Switches Intermediate System-to-Intermediate System DoS (cisco-sa-n39k-isis-dos-JhJA8Rfx)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the Intermediate System-to-Intermediate System IS-IS feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode...

7.4CVSS5.9AI score0.00265EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/26 2:59 p.m.12 views

CVE-2026-20074

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/03/25 4:00 p.m.40 views

Cisco IOS XE Software TLS Memory Exhaustion Denial of Service Vulnerability

A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during TLS connection setup. An attacker could exploit this...

7.4CVSS5.8AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/23 12:30 p.m.13 views

EUVD-2026-14402

An unauthenticated credential disclosure vulnerability in the /goform/ate endpoint of Nexxt Solutions Nebula 300+ firmware through Nebula300+v12.01.01.37 allows an adjacent attacker to obtain the administrator password in Base64-encoded form via a crafted HTTP request. The recovered credential ca...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/23 12:00 p.m.80 views

CVE-2026-31846

CVE-2026-31846 affects Nexxt Solutions Nebula 300+ firmware up to 12.01.01.37. A missing authentication flaw exists on the /goform/ate endpoint, allowing an adjacent unauthenticated attacker to retrieve sensitive information, including the administrator password. The response exposes parameters s...

7.1CVSS5.3AI score0.0025EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/23 12:00 a.m.14 views

PT-2026-27112

An unauthenticated credential disclosure vulnerability in the /goform/ate endpoint of Nexxt Solutions Nebula 300+ firmware through Nebula300+ v12.01.01.37 allows an adjacent attacker to obtain the administrator password in Base64-encoded form via a crafted HTTP request. The recovered credential c...

7.1CVSS5.8AI score0.0025EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/11 6:30 p.m.23 views

EUVD-2026-11219

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/11 5:16 p.m.17 views

CVE-2026-20074

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS0.0016EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/11 4:31 p.m.9 views

CVE-2026-20074

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/11 4:31 p.m.43 views

CVE-2026-20074 Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS0.0016EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/03/11 4:00 p.m.36 views

Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...

7.4CVSS5.8AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/11 12:00 a.m.27 views

PT-2026-24730

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description A flaw exists in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature that could allow a nearby, unauthenticated attacker to unexpectedly restart...

7.4CVSS7AI score0.0016EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/03/05 9:30 p.m.26 views

EUVD-2025-208321

A denial-of-service DoS vulnerability was identified in Omada EAP610 v3. An attacker with adjacent network access can send crafted requests to cause the device’s HTTP service to crash. This results in temporary service unavailability until the device is rebooted. This issue affects Omada EAP610...

6.9CVSS5.9AI score0.00219EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/04 9:32 p.m.20 views

EUVD-2026-9478

A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service DoS condition. Thi...

4.3CVSS6AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/04 7:16 p.m.21 views

CVE-2026-20024

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF...

6.8CVSS0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder