HPE Apollo 70 命令命令注入漏洞

The HPE Apollo 70 system is an Arm-based platform that provides the density and scalability required for large HPC cluster deployments. A command injection vulnerability exists in the libifc.so websetdefaultlangcfg function in the Baseboard Management Controller BMC firmware in HPE Apollo 70...

CVE-2021-22301

Mate 30 10.0.0.203C00E201R7P2 have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow...

Huawei Taurus-AL00A 缓冲区错误漏洞

The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. An out-of-bounds read vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability stems from the program not properly validating certain inputs. An attacker can exploit the vulnerability ...

NETGEAR R7450 访问控制错误漏洞

The NETGEAR R7450 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks.Netgear R7450 1.2.0.621.0.1 routers is vulnerable to an access control error that lacks proper access control and could be exploited by an attacker to...

CVE-2020-28144

The CVE-2020-28144 entry concerns Moxa EDR-G903 (Firmware ≤ 5.5), EDR-G902 (Firmware ≤ 5.5), and EDR-810 (Firmware ≤ 5.6). The vulnerability is due to an improper restriction of operations, where crafted requests may enable remote arbitrary code execution. The connected sources confirm the affect...

CVE-2020-8734

Improper input validation in the firmware for IntelR Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access...

Zero-Day Vulnerability in SonicWall SMA 100 Series Version 10.x Products

CISA is aware of a vulnerability in SonicWall Secure Mobile Access SMA 100 series products. SMA 100 series products provide an organization’s employees with remote access to internal resources. SonicWall security and engineering teams have confirmed a zero-day vulnerability that was reported by a...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

TK-Star Q90 Junior GPS horloge security vulnerability

TK-Star Q90 Junior GPS horloge is a Gps location tracker from TK-Star, China. A security vulnerability exists in the TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices, which can be exploited by an attacker to more easily use a SIM card by stealing the device...

PT-2021-9036 · Tk Star · Tk-Star Q90 Junior Gps

Name of the Vulnerable Software and Affected Versions: TK-Star Q90 Junior GPS horloge version 3.1042.9.8656 Description: An issue was discovered where any SIM card used with the device cannot have a PIN configured. If a PIN is configured, the device produces a "Remove PIN and restart!" message an...

CVE-2021-25909

ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919...

CVE-2021-20622

Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20621

Cross-site request forgery CSRF vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2021-20620

Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2020-35576

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...

D-link DSL-2888A 安全漏洞

The D-link DSL-2888A is a Unified Services Router from China AUO D-link. An information disclosure vulnerability exists in D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55, which originates from the disclosure of sensitive information in the response body, such as hashed admin...

Various GE products are vulnerable to trust management issues

GE Grid Solutions Reason RT Clocks RT430 and others are a precision time synchronization unit from General Electric GE. GE Grid Solutions Reason RT Clocks RT430, RT431 & RT434 All firmware versions prior to Version 08A06 contain a security vulnerability that could allow an authenticated, remote...