Lucene search
+L

17 matches found

NVD
NVD
added 2026/08/24 6:17 p.m.6 views

CVE-2026-71920

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 5:07 p.m.7 views

EUVD-2026-64979

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS5.6AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 5:07 p.m.12 views

CVE-2026-71920 DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout

Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vulnerability via a crafted request to cra...

6.9CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 5:07 p.m.8 views

CVE-2026-71920

DrayTek VigorSwitch (multiple models) contains a null pointer dereference in the formlogout function caused by missing validation of the Cookie header before string handling. A remote attacker with valid administrative credentials on the web management interface can send a crafted request to cras...

6.9CVSS5.4AI score
SaveExploits0References2
CVE
CVE
added 2026/07/14 4:30 p.m.29 views

CVE-2026-15701

CVE-2026-15701 affects Totolink NR1800X (firmware 9.1.0u.6279_B20210910) where the vulnerable component is lighttpd’s Form_Logout function in /formLogout.htm. The issue arises from manipulating the Host argument, triggering a stack-based buffer overflow. The vulnerability is exploitable remotely,...

10CVSS7.4AI score0.01096EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/06/05 7:18 p.m.16 views

CVE-2026-9479

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS8.2AI score0.00589EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/25 6:16 p.m.31 views

CVE-2026-9479

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS0.00589EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/25 5:45 p.m.20 views

CVE-2026-9479

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS6.2AI score0.00589EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/25 5:45 p.m.12 views

CVE-2026-9479 Edimax EW-7438RPn formLogout stack-based overflow

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS7.8AI score0.00589EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/25 5:45 p.m.48 views

EUVD-2026-31711

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS7.8AI score0.00589EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/25 5:45 p.m.36 views

CVE-2026-9479 Edimax EW-7438RPn formLogout stack-based overflow

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS0.00589EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/25 5:45 p.m.44 views

CVE-2026-9479

Edimax EW-7438RPn (firmware 1.31) contains a stack-based overflow in the formLogout function of /goform/formLogout triggered by manipulating the submit-url parameter. The vulnerability can be exploited remotely and has been publicly disclosed; vendor response is not available in the provided docu...

9CVSS7.8AI score0.00589EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.22 views

Edimax EW-7438RPn 安全漏洞

The Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Xunzhou Edimax Corporation. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates from the operation of the function formLogout in the file /goform/formLogout on the parameter submit-url...

9CVSS7.7AI score0.00589EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.30 views

PT-2026-43100

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

9CVSS7.8AI score0.00589EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2018/11/15 9:50 a.m.17 views

Security Bulletin: Security vulnerability related to Java SE (JDK) version 6 has been identified in the WebSphere Application Server where the Rational Asset Manager is deployed

Summary The Java SE JDK version 6.0 running on IBM WebSphere Application Server could allow a remote attacker to utilize the FormLogout servlet for redirecting to unauthorized hosts. This vulnerability can result in exploiting the WebSphere Application Server for potential spoofing. Vulnerability...

7.3CVSS2.1AI score0.02247EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2017/04/03 5:59 a.m.8 views

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

6.1CVSS5.8AI score0.00773EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2017/04/03 5:44 a.m.22 views

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

6.5AI score0.00773EPSS
SaveExploits1References1
Rows per page
Query Builder