CVE-2023-43201

The CVE-2023-43201 issue affects D-Link DI-7200GV2.E1 (v21.04.09E1). A stack overflow is triggered via the hi_up parameter in the qos_ext.asp function, as reported by multiple sources. Impact is described as high for confidentiality, integrity, and availability. Connected documents confirm the vu...

CVE-2023-43200

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function...

CVE-2023-43200

The CVE-2023-43200 entry affects D-Link DI-7200GV2.E1 (firmware v21.04.09E1). A stack overflow is triggered in the yyxz.data function when processing the id parameter, as described across multiple sources. The issue centrally concerns the yyxz.data function and its handling of id, enabling a pote...

CVE-2023-43197

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function...

CVE-2023-43196

D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the znjb parameter in the arpsys.asp function...

CVE-2023-43197

Affected product: D-Link DI-7200GV2.E1 (firmware 21.04.09E1). Issue: stack overflow in tgfile.asp when processing the fn parameter, effectively a buffer overflow in memory. Impact: can compromise confidentiality, integrity, and availability per the provided documents. Root cause: improper handlin...

CVE-2023-43199

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function...

CVE-2023-43198

CVE-2023-43198 affects D-Link DI-7200GV2.E1 (v21.04.09E1). The vulnerability is a stack overflow in the H5/hi_block.asp function when processing the popupId parameter, impacting confidentiality, integrity, and availability. No exploitation details are provided in the supplied documents, nor speci...

CVE-2023-43199

D-Link DI-7200GV2.E1 (v21.04.09E1) is affected by a stack overflow in the H5/login.cgi function triggered via the prev parameter. This issue can lead to a denial of service. Public details across sources consistently describe the vulnerability as a stack overflow in the login.cgi path. A practica...

CVE-2023-43196

CVE-2023-43196 affects D-Link DI-7200GV2.E1 (firmware v21.04.09E1). A stack overflow is triggered by processing the zn_jb parameter in the arp_sys.asp function, enabling a network-borne issue with high impact. The NVD entry assigns a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vecto...

CVE-2023-43201

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hiup parameter in the qosext.asp function...

e1-booking.com Cross Site Scripting vulnerability OBB-3440967

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moxa MiiNePort E1 Access Control Error Vulnerability

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

The vulnerability of the microprogramming software in the embedded converter Moxa MiiNePort E1, related to the lack of authentication for a critical function, allows a intruder to gain access to the system configuration interface, enabling them to view, modify, or terminate services.

The vulnerability of the microprogramming software in the embedded converter Moxa MiiNePort E1 is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to gain access to the system configuration interface, enabling them to view, modify,...

CVE-2023-28697

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

CVE-2023-28697

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

Improper access control

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

MOXA MiiNePort E1 访问控制错误漏洞

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

CVE-2023-28697 Moxa MiiNePort E1 - Broken Access Control

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service...

CVE-2023-28697

CVE-2023-28697 affects Moxa MiiNePort E1 embedded module. The issue is insufficient access control, allowing an unauthenticated remote user to perform arbitrary system operations or disrupt service. Root cause and impacted details are described across multiple sources (NVD/CNVD/CVE records, CNVD,...