Lucene search
+L

10250 matches found

osv-alsa
osv-alsa
•added 2022/09/13 12:00 a.m.•51 views

ALSA-2022:6448 Moderate: nodejs:14 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: DNS rebinding in --inspect via invalid IP addresses CVE-2022-32212 nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encodi...

8.1CVSS7.4AI score0.81832EPSS
SaveExploits3References12
attackerkb
attackerkb
•added 2022/09/08 6:15 p.m.•9 views

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

8.1CVSS5.7AI score0.01429EPSS
SaveExploits1References3
NVD
NVD
•added 2022/09/08 6:15 p.m.•32 views

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

8.1CVSS0.01429EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/08 6:15 p.m.•15 views

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

8.1CVSS5.8AI score0.01429EPSS
SaveExploits1References2
Prion
Prion
•added 2022/09/08 6:15 p.m.•24 views

Design/Logic Flaw

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

5.5CVSS7.6AI score0.01429EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/09/08 5:43 p.m.•80 views

CVE-2022-38258

The CVE-2022-38258 vulnerability affects D-Link DIR-819 (firmware v1.06) through a local file inclusion (LFI) in the web interface via the getpage parameter. The underlying issue allows an attacker to trigger a Denial of Service or access sensitive server information by crafting a crafted request...

8.1CVSS7.6AI score0.01429EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/09/08 5:43 p.m.•40 views

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

7.9AI score0.01429EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/09/08 12:00 a.m.•13 views

D-Link DIR-819 路径遍历漏洞

D-Link DIR-819 is a wireless dual-band router from China AUO D-Link. A security vulnerability exists in the D-Link DIR-819 v1.06. An attacker can exploit this vulnerability to cause a denial of service DoS or access sensitive server information by manipulating the getpage parameter in a specially...

8.1CVSS7.8AI score0.01429EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/08 12:00 a.m.•7 views

CVE-2022-38258: Improper Limitation of a Pathname to a Restricted Directory

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

8.1CVSS7.3AI score0.01429EPSS
SaveExploits1References2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:00 a.m.•67 views

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information...

6.8CVSS4.3AI score0.03064EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:00 a.m.•65 views

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

9.8CVSS4.4AI score0.91632EPSS
SaveIn wildExploits1
OSV
OSV
•added 2022/09/07 5:15 p.m.•16 views

CVE-2022-31414

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

7.5CVSS6.1AI score0.02134EPSS
SaveExploits0References3
NVD
NVD
•added 2022/09/07 5:15 p.m.•23 views

CVE-2022-31414

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

7.5CVSS0.02134EPSS
SaveExploits0References3
CVE
CVE
•added 2022/09/07 4:57 p.m.•69 views

CVE-2022-31414

The CVE-2022-31414 issue affects D-Link DIR-1960, specifically firmware DIR-1960_A1_1.11. The vulnerability is a buffer overflow in prog.cgi triggered via the srtcat function, allowing an attacker to cause a Denial of Service (DoS) through a crafted HTTP request to the router’s /prog.cgi endpoint...

7.5CVSS7.6AI score0.02134EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/07 4:57 p.m.•5 views

CVE-2022-31414

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

7.9AI score0.02134EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/07 12:00 a.m.•16 views

PT-2022-20735 · D Link · D-Link Dir-1960

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1960 version DIR-1960 A1 1.11 Description: A buffer overflow issue was discovered via srtcat in prog.cgi, allowing attackers to cause a Denial of Service DoS via a crafted HTTP request to the /prog.cgi API endpoint. Recommendations...

7.5CVSS7.6AI score0.02134EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/09/07 12:00 a.m.•18 views

D-Link DIR-1960 安全漏洞

The D-Link DIR-1960 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-1960 firmware version DIR-1960A11.11, which originates from a buffer overflow inclusion in prog.cgi via srtcat, which allows an attacker to trigger a denial of service DoS via a...

7.5CVSS7.7AI score0.02134EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/07 12:00 a.m.•6 views

CVE-2022-31414: Buffer Copy without Checking Size of Input

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

7.5CVSS7.5AI score0.02134EPSS
SaveExploits0References3
OSV
OSV
•added 2022/09/06 6:15 p.m.•23 views

CVE-2022-2436

The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'filepackagedir' parameter in versions up to, and including 3.2.49. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper tha...

8.8CVSS5.9AI score0.01971EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2022/09/06 12:00 a.m.•10 views

VulnCheck KEV: CVE-2022-26258

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

9.8CVSS7.7AI score0.91632EPSS
SaveIn wildExploits1References4
Rows per page
Query Builder