713 matches found
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as CBR40, CBR750, EAX20, EAX80, EX7500, LAX20, MK62, MR60, MS60, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000, XR300 lies in the absence of measures to sanitize input data. This allows attackers to execute arbitrary commands.
The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR40, CBR750, EAX20, EAX80, EX7500, LAX20, MK62, MR60, MS60, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80,...
The vulnerability of the built-in software for routers such as CBR40, CBR750, EAX20, EAX80, EX7500, LAX20, MK62, MR60, MS60, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000, and XR300 lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.
The vulnerability of the built-in software for routers such as CBR40, CBR750, EAX20, EAX80, EX7500, LAX20, MK62, MR60, MS60, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80,...
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as CBR40, CBR750, D7000v2, LAX20, MK62, MR60, MS60, MR80, MS80, RAX15, RAX20, RAX200, RAX45, RAX50, RAX43, RAX40v2, RAX35v2, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, XR1000 lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.
The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR40, CBR750, D7000v2, LAX20, MK62, MR60, MS60, MR80, MS80, RAX15, RAX20, RAX200, RAX45, RAX50, RAX43, RAX40v2, RAX35v2, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and XR1000 is related to insufficient...
The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.
The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D700D7000v2, LAX20, MK62, MR60, MS60, RAX15, RAX20, RAX200, RAX45, RAX50, RAX43, RAX40v2, RAX35v2, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, XR1000 lies in insufficient cleaning of input data. This allows a hacker to execute arbitrary commands.
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D700D7000v2, LAX20, MK62, MR60, MS60, RAX15, RAX20, RAX200, RAX45, RAX50, RAX43, RAX40v2, RAX35v2, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and XR1000 lies in insufficient cleaning of input data...
The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.
The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of the built-in software on NETGEAR RBS50Y, SRK60, SRR60, SRS60, SXK30, SXR30, SXS30, SRC60 Wi-Fi routers lies in the insufficient protection of operational data, allowing attackers to influence the integrity and confidentiality of the protected information.
The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as RBS50Y, SRK60, SRR60, SRS60, SXK30, SXR30, SXS30, and SRC60 relates to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to influence the integrity and confidentiality...
The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.
The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
The vulnerability of the sound output utility, which uses the computer’s built-in speaker to emit beeps, stems from deficiencies in path name restriction. This allows a violator to trigger a service failure.
The vulnerability of the sound output utility, which uses the computer’s built-in speaker for beeping, is related to deficiencies in path name restriction. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability in the built-in RDoc documentation generator for the Ruby programming language allows a perpetrator to execute arbitrary commands.
The vulnerability of the RDoc documentation generator for the Ruby programming language is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
SAP Business Technology Platform信息泄露漏洞
SAP Business Technology Platform is a business technology platform from SAP Germany that integrates intelligent enterprise applications with database and data management, analytics, integration and extension capabilities into a single platform for cloud and hybrid environments, including hundreds...
boomcatch (>=1.7.1 <=2.0.2), built.io (>=2.0.37 <=2.0.41) +2 more potentially affected by CVE-2021-4229 via ua-parser-js (=0.7.3)
ua-parser-js NPM version =0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on ua-parser-js and may be impacted: - boomcatch =1.7.1, =2.0.37, =2.0.37, =1.0.62, =1.0.72 Source cves: CVE-2021-4229 Source advisory: OSV:GHSA-PJWM-RVH2-C87W...
GHSA-QH9Q-34H6-HCV9 Directory traversal in mkdocs
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information...
CVE-2021-40978
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601. and https://github.com/nisdn/CVE-2021-40978/issues/1...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird stem from insufficient validation of input data, allowing attackers to forge updates for add-ons.
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to forge updates to extensions by using the X-certificate server from addons.mozilla.org, signed by a...
[SECURITY] Fedora 34 Update: zola-0.12.2-6.fc34
Fast static site generator with everything built-in...
ON24 ScreenShare 代码问题漏洞
ON24 ScreenShare is a plugin for screen sharing from ON24 USA. A security vulnerability exists in versions of the ON24 ScreenShare aka DesktopScreenShare.app plugin prior to version 2.0 for macOS, which allows an attacker to conduct remote file access via its built-in HTTP server...
Cisco ConfD 安全漏洞
Cisco ConfD is a management software from Cisco USA. A security vulnerability exists in Cisco ConfD that stems from the affected software incorrectly running SFTP user services with a privileged user enabled CLI when ConfD's built-in SSH server is running. The vulnerability allows an authenticate...
CVE-2021-29951
The Mozilla Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also...
