Lucene search
+L

210 matches found

OSV
OSV
added 2024/08/19 5:15 p.m.7 views

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

9.8CVSS5.8AI score0.01376EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/08/19 12:0 a.m.32 views

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

0.01376EPSS
SaveExploits0References3
CVE
CVE
added 2024/08/19 12:0 a.m.64 views

CVE-2024-42658

CVE-2024-42658 affects wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0. The Red Hat/NVD entries and vendor references describe an information disclosure where a remote attacker can obtain sensitive data via the cookie parameter. The exact root cause details are not provided beyond the cookie pa...

9.8CVSS6.5AI score0.01376EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.5 views

PT-2024-30095 · Wishnet · Wishnet Nepstech Wifi Router Ntpl-Xpon1Gfevn

Name of the Vulnerable Software and Affected Versions: wishnet Nepstech Wifi Router NTPL-XPON1GFEVN version 1.0 Description: An issue in the wishnet Nepstech Wifi Router allows a remote attacker to obtain sensitive information via the cookie's parameter. Recommendations: For wishnet Nepstech Wifi...

9.8CVSS6.8AI score0.01376EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:0 a.m.6 views

The vulnerability of the sub_41D354() function in D-Link DIR-823G router’s software allows a hacker to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the sub41D354 function in D-Link DIR-823G router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the Cookie parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

10CVSS7.9AI score0.00617EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2024/03/04 12:0 a.m.5 views

D-Link DIR-823G Cookie Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. The D-Link DIR-823G suffers from a buffer overflow vulnerability, which stems from a buffer overflow vulnerability in a cookie...

8.8CVSS6.2AI score0.00617EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/29 8:15 p.m.4 views

CVE-2024-27656

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

8.8CVSS6.3AI score0.00617EPSS
SaveExploits1References1
NVD
NVD
added 2024/02/29 8:15 p.m.19 views

CVE-2024-27656

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

8.8CVSS8.2AI score0.00617EPSS
SaveExploits1References1
Prion
Prion
added 2024/02/29 8:15 p.m.43 views

Buffer overflow

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

8.5AI score0.00617EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.8 views

D-Link DIR-823G Security Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-823G version A1V1.0.2B05, which originates from a buffer overflow vulnerability in the Cookie parameter...

8.8CVSS7.3AI score0.00617EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.8 views

PT-2024-1948 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the sub 41D354 function of the D-Link DIR-823G router's firmware when handling the Cookie parameter. This can allow a remote attacker to execute...

10CVSS7.9AI score0.00617EPSS
SaveExploits1References9
Veracode
Veracode
added 2024/01/13 8:25 a.m.28 views

Cross Site Scripting(XSS)

sympa:sid is vulnerable to cross-site scripting. The vulnerability due to Inappropriate use of the cookie parameter is both a salt for stored passwords. It leads to XSS due to parameter may also not provide sufficient security...

7.5CVSS5.5AI score0.00369EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/12/31 5:15 a.m.4 views

DEBIAN-CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...

7.5CVSS7.2AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/31 5:15 a.m.4 views

UBUNTU-CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...

7.5CVSS7.1AI score0.00369EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2023/12/31 5:15 a.m.37 views

CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...

7.5CVSS7.1AI score0.00369EPSS
SaveExploits0References3
Prion
Prion
added 2023/12/31 5:15 a.m.18 views

Cross site scripting

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...

5CVSS6.2AI score0.00369EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2023/12/31 12:0 a.m.55 views

CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...

7.5CVSS7.4AI score0.00369EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/12/31 12:0 a.m.7 views

Sympa Security Vulnerabilities

Sympa is an open source email management list software from the Sympa community. The software supports email management, authentication and access control. A security vulnerability exists in versions prior to Sympa 6.2.62, which stems from improper use of the cookie parameter, resulting in a...

7.5CVSS6.9AI score0.00369EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/29 12:0 a.m.10 views

Poly CCX and Trio Security Vulnerabilities

Poly Trio is a Trio series business conference phone from Poly USA. A security vulnerability exists in Poly CCX and Trio that stems from a denial of service DOS vulnerability in the cookie parameter of the HTTP Header Handler component. Affected products and versions: Poly CCX version 400, CCX...

7.5CVSS6.8AI score0.01006EPSS
SaveExploits1References5
NVD
NVD
added 2023/02/15 10:15 p.m.21 views

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

9.8CVSS10AI score0.00977EPSS
SaveExploits1References2
Rows per page
Query Builder