215 matches found
EUVD-2021-31202
Malicious code in bioql PyPI...
EUVD-2021-31211
Malicious code in bioql PyPI...
EUVD-2021-31204
Malicious code in bioql PyPI...
EUVD-2021-31250
Malicious code in bioql PyPI...
EUVD-2021-31208
Malicious code in bioql PyPI...
CVE-2021-40423
A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of HTTP requests can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2021-44357
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2021-44366
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2021-44394
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2021-44394
The CVE-2021-44394 entry affects Reolink RLC-410W (v3.0.0.136_20121102) where the cgiserver.cgi JSON command parser can crash the device, causing a reboot via specially crafted HTTP requests. Connected sources (TalOS) describe the vulnerability as a denial of service in the JSON command parsing p...
CVE-2021-44357
Summary: CVE-2021-44357 pertains to multiple denial-of-service vulnerabilities in the cgiserver.cgi JSON command parser of Reolink RLC-410W (v3.0.0.136_20121102). The TALOS analysis describes that the JSON parser and its param handling assume objects, and receiving non-object JSON (e.g., an empty...
PT-2022-11233
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description A denial of service issue exists in the cgiserver.cgi Upgrade API functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. An attacker can exploit th...
CVE-2021-44355: Improper Input Validation
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...
PT-2022-12051
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description Multiple denial of service issues exist in the cgiserver.cgi JSON command parser functionality. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request...
PT-2022-12052
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description Multiple denial of service issues exist in the cgiserver.cgi JSON command parser functionality. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request...
PT-2022-12072
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description The issue affects the cgiserver.cgi JSON command parser functionality, allowing a specially-crafted HTTP request to cause a denial of service, which can lead to a reboot. An attacker can...
PT-2022-12063
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description Multiple denial of service issues exist in the cgiserver.cgi JSON command parser functionality. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request...
PT-2022-12053
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description Multiple denial of service issues exist in the cgiserver.cgi JSON command parser functionality. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request...
CVE-2021-40405: Improper Access Control
A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...
PT-2022-12054
Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description The issue affects the cgiserver.cgi JSON command parser functionality, allowing a specially-crafted HTTP request to cause a denial of service, which can lead to a reboot. An attacker can...