Lucene search
+L

67 matches found

EUVD
EUVD
added 4 days ago12 views

EUVD-2026-51038

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

6.9CVSS5.9AI score0.00236EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago14 views

CVE-2026-44103

The CVE-2026-44103 entry details an unauthenticated remote code/integrity issue where the JupiCore firmware update mechanism transmits updates without integrity or verification checks, allowing an attacker to inject malicious firmware into the internal charging module. This could compromise devic...

6.9CVSS5.9AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago40 views

CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

6.9CVSS0.00236EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago6 views

CVE-2026-44103

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

6.9CVSS5.9AI score0.00236EPSS
SaveExploits0References2Affected Software4
EUVD
EUVD
added 2026/06/02 6:44 p.m.13 views

EUVD-2019-20158

Dräger SC Monitoring devices SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL contain hard-coded plaintext credentials in source code and a denial-of-service vulnerability that allows local and remote attackers to compromise device integrity across all software versions. A local attacker with...

7.6CVSS5.9AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/07 12:0 a.m.13 views

Ivanti EPMM 信任管理问题漏洞

Ivanti EPMM is a product developed by the American company Ivanti that allows IT departments to establish policies for mobile devices, applications, and content. Versions of Ivanti EPMM prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1 contained vulnerabilities related to trust management. These...

9.1CVSS5.8AI score0.00509EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 9:1 a.m.6 views

CVE-2025-9974

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitra...

8.8CVSS6AI score0.00401EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/27 3:3 p.m.9 views

CVE-2025-12003

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

8.2CVSS7.1AI score0.00633EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/11/27 12:0 a.m.6 views

ASUS Router Path Traversal Vulnerability (CNVD-2025-29937)

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A path traversal vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the integrity of the devic...

6.9CVSS6.8AI score0.00588EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/11/27 12:0 a.m.6 views

ASUS Router Path Traversal Vulnerability

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A path traversal vulnerability exists in ASUS Router, which can be exploited by an attacker to affect the integrity of the devi...

8.2CVSS6.8AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/25 8:15 a.m.7 views

CVE-2025-12003

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

8.2CVSS0.00633EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/25 7:30 a.m.20 views

CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

6.9CVSS0.00588EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/25 7:30 a.m.26 views

CVE-2025-59372

Summary: CVE-2025-59372 is a path-traversal vulnerability in ASUS Router Firmware. An authenticated, remote attacker could write files outside the intended directory, potentially compromising device integrity. Documents consistently describe this flaw as affecting ASUS Router devices and referenc...

6.9CVSS6.5AI score0.00588EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/25 7:30 a.m.9 views

EUVD-2025-199557

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

6.9CVSS6.3AI score0.00588EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/25 7:30 a.m.6 views

CVE-2025-59372

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...

6.9CVSS6.5AI score0.00588EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/25 7:28 a.m.8 views

EUVD-2025-199562

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

8.2CVSS6.6AI score0.00633EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/25 7:28 a.m.17 views

CVE-2025-12003

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...

8.2CVSS0.00633EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/25 7:28 a.m.19 views

CVE-2025-12003

CVE-2025-12003 describes a path traversal vulnerability in ASUS Router WebDAV that may allow unauthenticated remote attackers to impact device integrity. Multiple connected sources (Red Hat, CNVD, CVE lists) corroborate a WebDAV path traversal affecting ASUS Router, with the ASUS Security Advisor...

8.2CVSS6.8AI score0.00633EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.7 views

ASUS Router 安全漏洞

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A path traversal vulnerability exists in ASUS Router, which can be exploited by an attacker to affect the integrity of the devi...

8.2CVSS6.7AI score0.00633EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.11 views

PT-2025-47993

Name of the Vulnerable Software and Affected Versions ASUS Router WebDAV affected versions not specified Description A path traversal issue exists in WebDAV, potentially allowing remote attackers without authentication to compromise the integrity of the device. The issue may allow unauthorized...

8.2CVSS6.7AI score0.00633EPSS
SaveExploits0References6
Rows per page
Query Builder