CVE-2023-43201

The CVE-2023-43201 issue affects D-Link DI-7200GV2.E1 (v21.04.09E1). A stack overflow is triggered via the hi_up parameter in the qos_ext.asp function, as reported by multiple sources. Impact is described as high for confidentiality, integrity, and availability. Connected documents confirm the vu...

CVE-2023-43196

CVE-2023-43196 affects D-Link DI-7200GV2.E1 (firmware v21.04.09E1). A stack overflow is triggered by processing the zn_jb parameter in the arp_sys.asp function, enabling a network-borne issue with high impact. The NVD entry assigns a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vecto...

CVE-2023-43199

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function...

CVE-2023-43198

CVE-2023-43198 affects D-Link DI-7200GV2.E1 (v21.04.09E1). The vulnerability is a stack overflow in the H5/hi_block.asp function when processing the popupId parameter, impacting confidentiality, integrity, and availability. No exploitation details are provided in the supplied documents, nor speci...

CVE-2023-43200

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function...

CVE-2023-43200

The CVE-2023-43200 entry affects D-Link DI-7200GV2.E1 (firmware v21.04.09E1). A stack overflow is triggered in the yyxz.data function when processing the id parameter, as described across multiple sources. The issue centrally concerns the yyxz.data function and its handling of id, enabling a pote...

CVE-2023-43201

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hiup parameter in the qosext.asp function...

CVE-2023-43199

D-Link DI-7200GV2.E1 (v21.04.09E1) is affected by a stack overflow in the H5/login.cgi function triggered via the prev parameter. This issue can lead to a denial of service. Public details across sources consistently describe the vulnerability as a stack overflow in the login.cgi path. A practica...

CVE-2023-43197

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function...

e1-booking.com Cross Site Scripting vulnerability OBB-3440967

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moxa MiiNePort E1 Access Control Error Vulnerability

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

The vulnerability of the microprogramming software in the embedded converter Moxa MiiNePort E1, related to the lack of authentication for a critical function, allows a intruder to gain access to the system configuration interface, enabling them to view, modify, or terminate services.

The vulnerability of the microprogramming software in the embedded converter Moxa MiiNePort E1 is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to gain access to the system configuration interface, enabling them to view, modify,...

CVE-2023-28697

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

CVE-2023-28697

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

Improper access control

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

MOXA MiiNePort E1 访问控制错误漏洞

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

CVE-2023-28697 Moxa MiiNePort E1 - Broken Access Control

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

CVE-2023-28697

CVE-2023-28697 affects Moxa MiiNePort E1 embedded module. The issue is insufficient access control, allowing an unauthenticated remote user to perform arbitrary system operations or disrupt service. Root cause and impacted details are described across multiple sources (NVD/CNVD/CVE records, CNVD,...

PT-2023-2484 · Moxa · Miineport E1

Name of the Vulnerable Software and Affected Versions: Moxa MiiNePort E1 affected versions not specified Description: The issue is related to insufficient access control, allowing an unauthenticated remote user to exploit the vulnerability and perform arbitrary system operations or disrupt servic...

CLSA-2023-1676571183 Update of nss

Update to CKBI 2.60 from NSS 3.86 - Added: - Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - Certificate "Certainly Root E1" - Certificate "Certainly Root R1" - Certificate "DigiCert SMIME ECC P384 Root G5" - Certificate "DigiCert SMIME RSA4096 Root G5" - Certificate...