432 matches found
PT-2021-6109
Name of the Vulnerable Software and Affected Versions Zyxel NBG6604 firmware affected versions not specified Description The issue is related to an insufficient session expiration in the CGI program of the Zyxel NBG6604 firmware. This could allow a remote attacker to access the device if the...
CVE-2021-35034: Insufficient Session Expiration
An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access the device if the correct token can be intercepted...
PT-2021-6620
Name of the Vulnerable Software and Affected Versions Zyxel ARMOR Z1/Z2 firmware affected versions not specified Description A command injection issue in the CGI program of the firmware could allow an attacker to execute arbitrary OS commands via a LAN interface. This is due to the lack of measur...
Null pointer dereference
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations...
CVE-2021-23139
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations...
CVE-2021-23139
The CVE-2021-23139 issue affects Trend Micro Apex One and Worry-Free Business Security 10.0 SP1. A null pointer dereference in the CGI interface can allow a remote attacker to crash the CGI process, resulting in a denial of service. Descriptions and connected documents confirm the vulnerability i...
PT-2021-15390
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 10.0 SP1 Trend Micro Worry-Free Business Security version 10.0 SP1 Description A null pointer issue could allow an attacker to crash the CGI program on affected installations. Recommendations For Trend Micro Apex O...
CVE-2021-23139: NULL Pointer Dereference
A null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an attacker to crash the CGI program on affected installations...
PT-2021-4810
Name of the Vulnerable Software and Affected Versions Zyxel VPN2S firmware version 1.12 Description A command injection vulnerability in the CGI program could allow an authenticated, local user to execute arbitrary OS commands. The vulnerability is related to the failure to neutralize special...
CVE-2021-35028: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands...
CVE-2021-35030
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...
Cross site scripting
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...
PT-2021-20803
Name of the Vulnerable Software and Affected Versions: Zyxel GS1900-8 firmware version V2.60 Description: A vulnerability was found in the CGI program that did not properly sterilize packet contents, allowing an authenticated, local user to perform a cross-site scripting XSS attack via a crafted...
CVE-2021-35030: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...
CVE-2021-20696
DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...
CVE-2021-20696
DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...
Design/Logic Flaw
DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...
CVE-2021-20696
DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program...
CVE-2021-20696
CVE-2021-20696 affects D-Link DAP-1880AC firmware 1.21 and earlier. A remote authenticated attacker can send a crafted request to a CGI program to execute arbitrary OS commands, enabling remote code execution. Impact: high (CVE-2021-20696). Remediation: update to firmware 1.23 or later as per ven...