1141 matches found
PT-2024-7559 · D Link · D-Link Dsl-6740C
Name of the Vulnerable Software and Affected Versions: D-Link DSL-6740C version 6.TR069.20211230 Description: The issue is related to the use of weak password requirements in the D-Link DSL-6740C router's software component. This could allow a remote attacker to escalate their privileges. The...
The vulnerabilities of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, DSL/Ethernet CPE routers allow attackers to cause service interruptions.
The vulnerability of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, and DSL/Ethernet CPE routers lies in the fact that the operation data is exposed beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
D-Link DSL-2750U Cross-Site Scripting Vulnerability
The D-Link DSL-2750U is a wireless router from China-based AUO D-Link. The D-Link DSL-2750U R5B017 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter PortMappingDescription, which can be exploited b...
CVE-2024-9792
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...
CVE-2024-9792 D-Link DSL-2750U Port Forwarding Page cross site scripting
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...
CVE-2024-9792 D-Link DSL-2750U Port Forwarding Page cross site scripting
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...
CVE-2024-9792
CVE-2024-9792 affects the D-Link DSL-2750U R5B017, specifically the Port Forwarding Page. The vulnerability arises from improper handling of the PortMappingDescription parameter, enabling cross-site scripting (XSS) which can be triggered remotely. Several connected sources (CNVD/CNNVD/NVD entries...
The vulnerability of D-Link DSL-225 router’s microprogramming software, related to bypassing the authentication process, allows attackers to circumvent the authentication mechanism.
The vulnerability of D-Link DSL-225 router microprogramming software is related to the bypassing of the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process...
PT-2024-5347 · D Link · D-Link Dsl-225
Name of the Vulnerable Software and Affected Versions: D-Link DSL-225 affected versions not specified Description: The issue is related to an authentication bypass in the D-Link DSL-225 router's firmware, which can be exploited by using an alternate path or channel. This could allow a remote...
CVE-2024-40641
Nuclei (projectdiscovery/nuclei) has a CVE-2024-40641 OS Command Injection vector where unsigned code templates can execute via workflows, exposing arbitrary commands when users can edit/execute workflow files. Connected advisories confirm the root cause is code-template execution without the -co...
Fedora: Security Advisory (FEDORA-2024-b458482d48)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: ghc-hakyll-4.16.2.0-4.fc39
Hakyll is a static website compiler library. It provides you with the tools to create a simple or advanced static website using a Haskell DSL and formats su ch as markdown or RST. You can find more information, including a tutorial, on t he website:...
[SECURITY] Fedora 40 Update: ghc-hakyll-4.16.2.0-4.fc40
Hakyll is a static website compiler library. It provides you with the tools to create a simple or advanced static website using a Haskell DSL and formats su ch as markdown or RST. You can find more information, including a tutorial, on t he website:...
CVE-2024-27920
The CVE covers projectdiscovery/nuclei where unsigned code templates could be executed via workflows in Nuclei v3. root cause: oversight in workflow execution that allows executing unsigned templates. Impact: local execution with high severity per listed metrics; effects are mitigation-dependent ...
BIT-GRADLE-2021-29428 Local privilege escalation through system temporary directory
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...
JetBrains TeamCity Directory Traversal Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a directory...
JetBrains TeamCity < 2023.11.2 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2023.11.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed CVE-2024-24936 - In JetBrains TeamCity before...
CVE-2024-24938
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation...
