Lucene search
K

29 matches found

EUVD
EUVD
added 2026/05/25 10:31 p.m.8 views

EUVD-2026-31770

Missing Authorization vulnerability in edwardplainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a through 2.161...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.3 views

The vulnerability of D-Link DIR-816 A2’s microprogrammed software, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS5.9AI score0.05752EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the cpython module in the Python programming language allows a perpetrator to execute arbitrary code.

The vulnerability of the cPython programming language in Python is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7AI score0.00061EPSS
Exploits0References18Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/03/24 12:0 a.m.1 views

The vulnerability of the Bitdefender BOX 1 device for protecting appliances and gadgets lies in the lack of measures taken at the control level to clean data. This allows a perpetrator to execute arbitrary commands.

The vulnerability of the Bitdefender BOX 1 device for protecting appliances and gadgets is related to the lack of measures taken to clean data at the control level during the processing of the final checkpoint /checkimageandtriggerrecovery. Exploiting this vulnerability allows a remote attacker t...

9.6CVSS8.3AI score0.02876EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/17 12:0 a.m.1 views

The vulnerability of microprogrammed software in telephones and audio conferencing systems, related to the lack of measures taken at the control level to protect data, allows a perpetrator to execute arbitrary codes.

The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS5.9AI score0.00306EPSS
Exploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.1 views

The vulnerability of the Cortex XSOAR CommonScripts package for security management, automation, and response solutions lies in the lack of data cleansing at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the Cortex XSOAR CommonScripts package for security management, automation, and response involves a lack of data cleansing measures at the control level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

6.5CVSS8.3AI score0.02423EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:0 a.m.1 views

The vulnerability of the SmartFabric OS10 network operating system, related to the failure to sanitize input data at the control level, allows a perpetrator to execute arbitrary code.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00323EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:0 a.m.1 views

The vulnerability of the SmartFabric OS10 network operating system, related to the failure to sanitize input data at the control level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

7.8CVSS5.8AI score0.00303EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/11 12:0 a.m.1 views

The vulnerability of Juniper Networks’ Junos Space network resource management platform, related to the failure to cleanse input data at the control level, allows attackers to execute arbitrary commands.

The vulnerability of the Juniper Networks Junos Space network resource management platform lies in the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted requests...

7.5CVSS0.01342EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.0 views

The vulnerability of the cgi_FMT_R12R5_1st_DiskMGR() function (/cgi-bin/hd_config.cgi) in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices allows a attacker to execute arbitrary commands.

The vulnerability of the cgiFMTR12R51stDiskMGR function /cgi-bin/hdconfig.cgi in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04...

9CVSS0.01557EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.0 views

The vulnerability of the cgi_FMT_Std2R5_2nd_DiskMGR() function (/cgi-bin/hd_config.cgi) in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices allows a hacker to execute arbitrary commands.

The vulnerability of the cgiFMTStd2R52ndDiskMGR function /cgi-bin/hdconfig.cgi in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04...

9CVSS0.01423EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2024/09/27 12:0 a.m.0 views

The vulnerability of the foomatic-rip filter in the cups-filters printing package allows a hacker to execute arbitrary code.

The vulnerability of the foomatic-rip filter in the cups-filters printing package is related to the lack of measures taken to sanitize input data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS
Exploits6References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.0 views

The vulnerability of the Microprogrammed Software Routers Telesquare TLR-2005Ksh, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary commands.

The vulnerability of the Microprogrammed Software Router Telesquare TLR-2005Ksh is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.5CVSS0.93027EPSS
Exploits8References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.2 views

The vulnerability of microprogrammed software in network video recorders like SystemK NVR 504/508/516 arises from the lack of measures taken to clean data at the control level. This allows intruders to execute arbitrary commands.

The vulnerability of microprogrammed network video recorders like SystemK NVR 504/508/516 lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an intruder operating remotely to execute arbitrary commands...

10CVSS0.00696EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/01/02 12:0 a.m.2 views

The vulnerability of the downFiles function in the microprogramming software for wireless access point controllers Ruijie WS6008 and WS6108 allows a intruder to execute arbitrary commands.

The vulnerability of the downFiles function in the microprogramming software for wireless access point controllers Ruijie WS6008 and WS6108 is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a malicious actor to execute arbitrary...

10CVSS0.00322EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.2 views

The vulnerability of the Python programming language’s pip module, related to the lack of data cleaning at the control level, allows attackers to alter the repository configuration.

The vulnerability of the Python programming language’s pip module is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker to modify the repository configuration...

5.5CVSS0.00075EPSS
Exploits0References11Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.1 views

The vulnerability of the microprogrammed software of the D-LINK DIR-806 wireless router is related to the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the HTTPST parameter...

8.5CVSS0.0142EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:0 a.m.1 views

The vulnerability of the sub_40A80C function in TP-Link TL-WPA8630P microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub40A80C function in TP-Link TL-WPA8630P microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS0.01023EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/06 12:0 a.m.1 views

The vulnerability of the sub_40A774 function in TP-Link TL-WPA8630P microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub40A774 function in TP-Link TL-WPA8630P microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS0.01433EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.1 views

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR450 and XR500 Wi-Fi routers’ built-in software relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted data remotely...

7CVSS5.8AI score
Exploits0References1Affected Software2
Rows per page
Query Builder