Lucene search
K

8 matches found

CNNVD
CNNVD
added 2024/12/04 12:0 a.m.1 views

WordPress plugin NPS computy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.7AI score0.01989EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2024/05/22 12:0 a.m.0 views

VulnCheck KEV: CVE-2010-2506

Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...

2.9CVSS5.9AI score0.00162EPSS
Exploits0References1
OSV
OSV
added 2024/01/25 10:15 p.m.0 views

CVE-2023-51833

A command injection issue in TRENDnet TEW-411BRPplus v.2.07eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

8.1CVSS6.1AI score0.00685EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/25 12:0 a.m.1 views

TRENDnet TEW-411BRPplus Command Injection Vulnerability

The TRENDnet TEW-411BRPplus is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-411BRPplus version v.2.07eu, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page...

8.1CVSS8.1AI score0.00685EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.2 views

PT-2024-14307

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-411BRPplus version 2.07 eu Description A command injection issue exists in TRENDnet TEW-411BRPplus version 2.07 eu that allows a local attacker to execute arbitrary code. This is achieved by manipulating the data1 parameter within...

8.1CVSS8.4AI score0.00685EPSS
Exploits1References7
VulnCheck KEV
VulnCheck KEV
added 2023/07/05 12:0 a.m.0 views

VulnCheck KEV: CVE-2010-1573

Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username Gemtek and password gemtekswd for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the 1 data1, 2 data2, or 3 data3 parameters to a Debugcommandpage.asp...

10CVSS7.6AI score0.11251EPSS
Exploits1References1
NVD
NVD
added 2010/06/28 6:30 p.m.7 views

CVE-2010-2506

Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...

2.9CVSS5.8AI score0.00162EPSS
Exploits0References2
Cvelist
Cvelist
added 2010/06/28 6:6 p.m.12 views

CVE-2010-2506

Cross-site scripting XSS vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter...

5.8AI score0.00162EPSS
Exploits0References2
Rows per page
Query Builder