Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

9 matches found

NVD
NVD•added 2021/06/04 9:15 p.m.•46 views

CVE-2021-31249

A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components...

6.5CVSS0.18003EPSS
SaveExploits4References3
NVD
NVD•added 2021/06/04 9:15 p.m.•32 views

CVE-2021-31250

Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...

5.4CVSS0.79605EPSS
SaveExploits4References3
Prion
Prion•added 2021/06/04 9:15 p.m.•23 views

Crlf injection

A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components...

6.4CVSS6.5AI score0.18003EPSS
SaveExploits4References3
Prion
Prion•added 2021/06/04 9:15 p.m.•25 views

Cross site scripting

Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...

3.5CVSS5.6AI score0.79605EPSS
SaveExploits4References3
CVE
CVE•added 2021/06/04 8:29 p.m.•155 views

CVE-2021-31249

CHIYU TCP/IP Converter BF-430, BF-431, and BF-450M devices are affected by CVE-2021-31249, a CRLF injection flaw stemming from insufficient validation of the redirect= parameter in multiple CGI components. Exploitation could lead to information disclosure, data modification, or unauthorized admin...

6.5CVSS6.5AI score0.18003EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist•added 2021/06/04 8:29 p.m.•54 views

CVE-2021-31249

A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components...

6.8AI score0.18003EPSS
SaveExploits4References3
Cvelist
Cvelist•added 2021/06/04 8:28 p.m.•36 views

CVE-2021-31250

Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...

5.9AI score0.79605EPSS
SaveExploits4References3
CVE
CVE•added 2021/06/04 8:28 p.m.•165 views

CVE-2021-31250

CHIYU TCP/IP Converter devices BF-430, BF-431 and BF-450M are affected by CVE-2021-31250 (XSS) due to insufficient input sanitization in several web components (man.cgi, if.cgi, dhcpc.cgi, ppp.cgi). Exploitation could allow a attacker to execute arbitrary JavaScript in a victim’s browser, with po...

5.4CVSS5.8AI score0.79605EPSS
SaveIn wildExploits4References3Affected Software1
Exploit DB
Exploit DB•added 2021/06/01 12:0 a.m.•377 views

CHIYU TCP/IP Converter devices - CRLF injection

Exploit Title: CHIYU TCP/IP Converter devices - CRLF injection Date: May 31 2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, and BF-450M TCP/IP Converter device...

6.5CVSS6.4AI score0.18003EPSS
SaveExploits4
Rows per page
Query Builder