Lucene search
+L

252 matches found

CNVD
CNVD
added 2024/07/19 12:00 a.m.7 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29676)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a DDP...

8.8CVSS8.9AI score0.00872EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/12 12:00 a.m.12 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29679)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.9AI score0.01049EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/12 12:00 a.m.42 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29680)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.9AI score0.01049EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:23 p.m.7 views

Malicious code in Bе.Vlaanderen.Basisregisters.Utilitіes.Rfc3339DatеTіmeOffset (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/05/07 11:15 p.m.5 views

CVE-2023-35757

D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS6.4AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.9 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set Date Time NTP server. An attacker could exploit the...

8.8CVSS8.5AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.10 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a DDP...

8.8CVSS8.8AI score0.00872EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.9 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.8AI score0.01049EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/25 12:15 p.m.7 views

CVE-2024-4167

A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub422AA4. The manipulation of the argument year/month/day/hour/minute/second leads to stack-based buffer overflow. The attack may be launched remotely. VDB-261986 is the identifier...

8.8CVSS6.3AI score0.01755EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/23 5:15 a.m.44 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS9.6AI score0.01025EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/04/23 5:00 a.m.13 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS9.6AI score0.01025EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/23 5:00 a.m.22 views

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...

9.8CVSS7.4AI score
SaveExploits0References6
CNNVD
CNNVD
added 2024/04/23 12:00 a.m.14 views

mysql2 安全漏洞

MySQL2 is a MySQL client for Node.js by Andrey Sidorov, a personal developer. A security vulnerability exists in mysql2 2 versions prior to 3.9.7, which originates from an arbitrary code injection via an incorrect cleanup of the timezone parameter in the readCodeFor function by calling the native...

9.8CVSS7.6AI score0.01025EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/04/10 12:00 a.m.8 views

Joda-Time 安全漏洞

Joda-Time is a Joda open source replacement for the widely used Java date and time classes prior to Java SE 8. A security vulnerability exists in Joda-Time version v2.12.5 that stems from the presence of a null pointer exception...

9.1CVSS4.7AI score0.0083EPSS
SaveExploits0References5
OSV
OSV
added 2024/04/08 6:15 p.m.18 views

CVE-2024-23082

ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parseCharSequence, ParsePosition. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a...

5.8AI score0.00271EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/08 6:15 p.m.9 views

UBUNTU-CVE-2024-23082

DISPUTED ThreeTen Backport v1.6.8 was discovered to contain an integer overflow via the component org.threeten.bp.format.DateTimeFormatter::parseCharSequence, ParsePosition. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence o...

5.8AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/02/26 12:00 a.m.11 views

PT-2024-19477 · Linksys · Linksys Router E1700

Name of the Vulnerable Software and Affected Versions: Linksys Router E1700 version 1.0.04 build 3 Description: An issue was discovered in the Linksys Router E1700, allowing authenticated attackers to execute arbitrary code via the setDateTime function. Recommendations: For Linksys Router E1700...

8CVSS7.9AI score0.09346EPSS
SaveExploits1References5
Circl
Circl
added 2024/02/13 9:56 a.m.8 views

CVE-2019-17332

creationtimestamp| type| source ---|---|--- 2024-02-13 09:56:57+00:00| seen| https://t.me/ctinow/183688...

7.3CVSS6.3AI score0.00717EPSS
SaveExploits0References1
Circl
Circl
added 2024/02/12 12:36 p.m.10 views

CVE-2023-28900

creationtimestamp| type| source ---|---|--- 2024-02-12 12:36:20+00:00| seen| https://t.me/ctinow/183074...

5.3CVSS5.5AI score0.00377EPSS
SaveExploits0References1
Circl
Circl
added 2024/01/26 11:52 p.m.7 views

GHSA-GWR4-PJ6R-2576

creationtimestamp| type| source ---|---|--- 2024-01-26 23:52:03+00:00| seen| https://t.me/arpsyndicate/3120...

4.8AI score
SaveExploits0References1
Rows per page
Query Builder