Lucene search
+L

5131 matches found

CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•13 views

Intel PROSet Wireless 安全漏洞

Intel PROSet Wireless is a driver for the Intel PROSet Wireless card from Intel Corporation USA. A security vulnerability exists in Intel PROSet Wireless WiFi and KillerTM WiFi, where authenticated users can potentially enable information disclosure through adjacent access...

5.7CVSS5.9AI score0.00343EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•13 views

Intel PROSet Wireless 输入验证错误漏洞

Intel PROSet Wireless is a driver for Intel PROSet wireless network cards from Intel Corporation USA. An input validation error vulnerability exists in Intel PROSet Wireless, where an unauthenticated user could enable denial of service via adjacent access...

6.5CVSS6.5AI score0.00386EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•15 views

Intel PROSet Wireless 输入验证错误漏洞

Intel PROSet Wireless is a driver for Intel PROSet wireless network cards from Intel Corporation USA. An input validation error vulnerability exists in Intel PROSet Wireless, where an unauthenticated user could enable denial of service via adjacent access...

6.5CVSS6.5AI score0.00386EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/11/09 6:06 p.m.•22 views

kernel: Improper access control in BlueZ may allow information disclosure vulnerability.

A flaw was found in the Linux kernel. Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. The highest threat from this vulnerability is to data confidentiality and integrity...

5.7CVSS6.5AI score0.00827EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/11/09 5:26 p.m.•9 views

kernel: Improper access control in BlueZ may allow information disclosure vulnerability.

A flaw was found in the Linux kernel. Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. The highest threat from this vulnerability is to data confidentiality and integrity...

5.7CVSS6.5AI score0.00827EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2021/10/28 12:00 a.m.•58 views

NETGEAR R7000 SOAP ParentalControl Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of prope...

8.8CVSS2.2AI score0.01146EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•234 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : linux-firmware Vulnerability (NS-SA-2021-0099)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has linux-firmware packages installed that are affected by a vulnerability: - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable...

8.8CVSS8AI score0.00982EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•33 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : linux-firmware Vulnerability (NS-SA-2021-0185)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has linux-firmware packages installed that are affected by a vulnerability: - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable...

8.8CVSS8AI score0.00982EPSS
SaveExploits0References3
NVD
NVD
•added 2021/10/25 5:15 p.m.•24 views

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS0.0148EPSS
SaveExploits0References2
Prion
Prion
•added 2021/10/25 5:15 p.m.•25 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

5.8CVSS8.8AI score0.0148EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/10/25 5:15 p.m.•26 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

3.3CVSS6.2AI score0.01456EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/10/25 5:15 p.m.•23 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

5.8CVSS8.8AI score0.00821EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/25 5:10 p.m.•32 views

CVE-2021-34862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

8.8CVSS9AI score0.00821EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•3 views

CVE-2021-34862: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

8.8CVSS6.7AI score0.00821EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•3 views

CVE-2021-34863: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS6.7AI score0.0148EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•4 views

CVE-2021-34860: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

6.5CVSS5.8AI score0.01456EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/21 12:00 a.m.•17 views

PT-2021-6150 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n 5553 Description: The issue results from the lack of proper access control within the httpd service, which listens on TCP port 80 by default. This allows network-adjacent attackers to...

6.5CVSS6.3AI score0.0058EPSS
SaveExploits0References7
OSV
OSV
•added 2021/10/19 7:15 p.m.•17 views

CVE-2021-31365

An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 Series platforms allows an adjacent attacker sending a stream of layer 2 frames will trigger an Aggregated Ethernet AE interface to go down and thereby causing a Denial of Service DoS. By...

6.5CVSS5.8AI score0.00397EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/10/19 6:16 p.m.•33 views

CVE-2021-31366 Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS

An Unchecked Return Value vulnerability in the authd authentication daemon of Juniper Networks Junos OS on MX Series configured for subscriber management / BBE allows an adjacent attacker to cause a crash by sending a specific username. This impacts authentication, authorization, and accounting A...

6.5CVSS6.6AI score0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/19 12:00 a.m.•5 views

CVE-2021-31362: Protection Mechanism Failure

A Protection Mechanism Failure vulnerability in RPD routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause established IS-IS adjacencies to go down by sending a spoofed hello PDU leading to a Denial of Service DoS condition...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits0References2
Rows per page
Query Builder