Lucene search
+L

314 matches found

ATTACKERKB
ATTACKERKB
added 2023/06/29 12:15 a.m.6 views

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

7.5CVSS7.1AI score0.07176EPSS
SaveExploits1References3
Prion
Prion
added 2023/06/29 12:15 a.m.28 views

Directory traversal

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

5CVSS7.4AI score0.07176EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2023/06/26 2:15 p.m.24 views

CVE-2023-30261

Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request...

9.8CVSS9.8AI score0.3173EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/06/26 12:00 a.m.17 views

CVE-2023-30261

Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request...

7.8AI score0.3173EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/06/22 8:15 p.m.6 views

CVE-2023-36356

TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

7.7CVSS7.3AI score0.00714EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/06/22 8:15 p.m.8 views

CVE-2023-36358

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

7.7CVSS7.4AI score0.00704EPSS
SaveExploits1References2
Prion
Prion
added 2023/06/22 8:15 p.m.22 views

Buffer overflow

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

5CVSS7.6AI score0.00815EPSS
SaveExploits1References1
OSV
OSV
added 2023/06/22 12:15 p.m.10 views

CVE-2023-29711

An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...

9.8CVSS6.1AI score0.70308EPSS
SaveExploits1References2
Prion
Prion
added 2023/06/22 12:15 p.m.20 views

Design/Logic Flaw

An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...

7.5CVSS9.6AI score0.70308EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/06/22 12:00 a.m.11 views

Interlink PSG-5124 安全漏洞

The Interlink PSG-5124 is a switch from Interlink. A security vulnerability exists in the Interlink PSG-5124 version 1.0.4 that stems from the presence of an incorrect access control issue that allows an attacker to execute arbitrary code via a crafted GET request...

9.8CVSS8.8AI score0.70308EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/06/22 12:00 a.m.15 views

TP-LINK TL-WR940N 安全漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a security issue in the component LocalManageControlRpm. An attacker could exploit the vulnerability to cause a denial of service DoS by constructing...

7.7CVSS7.4AI score0.00798EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.15 views

PT-2023-3453 · Tp Link · Tp-Link Tl-Wr941Nd +2

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR941ND versions V5 through V6 Description: A buffer overflow was discovered in the /userRpm/QoSRuleListRpm component of TP-Link routers, allowing...

7.5CVSS7.2AI score0.00815EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.14 views

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software lies in improper cleaning or release of resources, allowing a intruder to trigger a service failure.

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted GET request...

6.5CVSS5.6AI score0.00322EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/08 12:00 a.m.34 views

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

9.9AI score0.0084EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/05/04 12:00 a.m.35 views

CVE-2023-25289

Directory Traversal vulnerability in virtualreception Digital Receptie version win7sp1rtm.101119-1850 6.1.7601.1.0.65792 in embedded web server, allows attacker to gain sensitive information via a crafted GET request...

7.6AI score0.0769EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2023/03/31 12:00 a.m.35 views

CVE-2023-27159

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request...

7.5AI score0.36419EPSS
SaveExploits1References4
NVD
NVD
added 2023/03/24 10:15 p.m.30 views

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

7.5CVSS7.4AI score0.00747EPSS
SaveExploits1References1
Prion
Prion
added 2023/03/24 10:15 p.m.23 views

Design/Logic Flaw

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

5CVSS7.4AI score0.00747EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/24 12:00 a.m.7 views

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

7.4AI score0.00747EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/03/24 12:00 a.m.10 views

AVer Information PTZApp 路径遍历漏洞

AVer Information PTZApp is an innovative freeware with an upgrade interface from AVer Information China. It is used to control AVer USB cameras. A security vulnerability exists in AVer Information PTZApp version v20.01044.48. An attacker has exploited the vulnerability to access sensitive files v...

7.5CVSS7.3AI score0.00747EPSS
SaveExploits1References2
Rows per page
Query Builder