Lucene search
K

8 matches found

NVD
NVD
added 2024/11/29 7:15 a.m.13 views

CVE-2024-11981

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

7.5CVSS0.00534EPSS
Exploits0References2
CVE
CVE
added 2024/11/29 6:21 a.m.46 views

CVE-2024-11981

CVE-2024-11981 affects Billion Electric routers (e.g., M100, M150, M120N, M500). The vulnerability is an authentication bypass that allows unauthenticated attackers to retrieve contents of arbitrary web pages. Public details in multiple sources confirm the issue and affected models. No explicit r...

7.5CVSS7.5AI score0.00534EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/11/29 6:21 a.m.15 views

CVE-2024-11981 Billion Electric router - Authentication Bypass

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

7.5CVSS0.00534EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.5 views

PT-2024-21290 · Element · Element Android

Name of the Vulnerable Software and Affected Versions: Element Android versions 1.4.3 through 1.6.10 Description: The issue allows a third-party malicious application to start any internal activity by passing some extra parameters, potentially making Element Android display an arbitrary web page,...

8.4CVSS7.4AI score0.00473EPSS
Exploits0References18
CNNVD
CNNVD
added 2021/07/08 12:0 a.m.7 views

SAMSUNG Members 安全漏洞

Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to load arbitrary web pages in a webview. No details of the vulnerability are provided at this time...

3.3CVSS5.8AI score0.00225EPSS
Exploits0References1
Prion
Prion
added 2012/10/08 6:55 p.m.10 views

Design/Logic Flaw

tiki-featuredlink.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."...

5.8CVSS7.1AI score0.07679EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2009/06/10 12:0 a.m.2 views

PT-2009-4180 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions prior to 2.2.1 iPhone OS for iPod touch versions prior to 2.2.1 Description: The XSLT implementation in WebKit does not properly handle redirects, allowing remote attackers to read XML...

4.3CVSS6.1AI score0.02619EPSS
Exploits2References15
Prion
Prion
added 2007/03/02 9:18 p.m.16 views

Code injection

Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port 14942/tcp...

7.5CVSS7.3AI score0.02444EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder