Lucene search
K

66 matches found

Cvelist
Cvelist
added 2026/06/08 5:45 p.m.38 views

CVE-2026-11555 D-Link DGS-1100-08PD Web boa.conf least privilege violation

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS0.00405EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/08 5:45 p.m.8 views

CVE-2026-11555

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS5AI score0.00405EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/06/08 5:45 p.m.7 views

EUVD-2026-35178

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS5AI score0.00405EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/06/08 5:45 p.m.6 views

CVE-2026-11555 D-Link DGS-1100-08PD Web boa.conf least privilege violation

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS5AI score0.00405EPSS
Exploits0References6
CVE
CVE
added 2026/06/08 5:45 p.m.24 views

CVE-2026-11555

CVE-2026-11555 affects D-Link DGS-1100-08PD (firmware 1.00.006). The Web Interface component processes /etc/boa.conf in an unknown way, leading to a least-privilege violation. The issue can be exploited remotely with high complexity; exploits are publicly available. No remediation details are pro...

7.5CVSS5AI score0.00405EPSS
Exploits0References6Affected Software1
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.11 views

D-Link DGS-1100-08PD 安全漏洞

The D-Link DGS-1100-08PD is an 8-port Gigabit intelligent management switch from D-Link Corporation. Version 1.00.006 of the D-Link DGS-1100-08PD contains a security vulnerability. This vulnerability stems from improper handling of the /etc/boa.conf file within the Web Interface component, which...

7.5CVSS4.9AI score0.00405EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.9 views

PT-2026-47436

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS4.9AI score0.00405EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/04/27 7:23 p.m.3 views

CVE-2026-7026

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.00556EPSS
Exploits0References1
CVE
CVE
added 2026/04/26 7:15 a.m.7 views

CVE-2026-7026

The CVE concerns D-Link DGS-3420 firmware 1.50.018 with a cross-site scripting vulnerability in the System Information Settings Page, caused by manipulation of the System Name argument. The issue allows remote exploitation and the exploit has been publicly disclosed. Supported metrics indicate CV...

6.8CVSS3.8AI score0.00556EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/04/26 7:15 a.m.3 views

EUVD-2026-25701

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.8AI score0.00556EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/26 7:15 a.m.2 views

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.00556EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/26 7:15 a.m.32 views

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS0.00556EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/26 7:15 a.m.6 views

CVE-2026-7026

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.00556EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2026/04/26 12:0 a.m.7 views

D-Link DGS-3420 跨站脚本漏洞

The D-Link DGS-3420 is a managed Gigabit Ethernet switch designed for enterprise networks by D-Link Corporation. The version 1.50.018 of the D-Link DGS-3420 contains a cross-site scripting vulnerability. This vulnerability arises from improper handling of the System Name parameter in the System...

6.8CVSS5.6AI score0.00556EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.5 views

PT-2026-35207

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.00556EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-7328

Malware in sbrugna...

9.8CVSS9.5AI score0.01687EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2016-1316

Malware in sbrugna...

8.1CVSS8.2AI score0.01169EPSS
Exploits1References4
vulnersOsv
vulnersOsv
added 2025/06/19 4:19 p.m.6 views

com.powsybl:powsybl-distribution-core (>=6.0.0 <=6.7.1), com.powsybl:powsybl-starter (>=2023.3.0 <=2025.0.0) +1 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-powerfactory-dgs (>=6.0.0-RC1 <=6.7.1)

com.powsybl:powsybl-powerfactory-dgs MAVEN version =6.0.0-RC1, =6.0.0, =2023.3.0, =1.1.0, =1.11.1 Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442144...

6.3CVSS5.8AI score0.0035EPSS
Exploits0
OSV
OSV
added 2024/10/25 8:15 a.m.1 views

CVE-2024-10150

The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

5.4CVSS5.9AI score0.00271EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.3 views

PT-2024-16065 · WordPress · Bamazoo – Button Generator

Name of the Vulnerable Software and Affected Versions: Bamazoo – Button Generator plugin for WordPress versions up to, and including, 1.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's dgs shortcode. This allows...

6.4CVSS6.9AI score0.00271EPSS
Exploits0References7
Rows per page
Query Builder