Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-17046

Malware in sbrugna...

5.9CVSS5.9AI score0.00662EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:22 a.m.4 views

CVE-2023-34139

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affecte...

8.8CVSS7.9AI score0.00186EPSS
Exploits0References1
OSV
OSV
added 2023/07/17 6:15 p.m.1 views

CVE-2023-34139

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affecte...

8.8CVSS5.9AI score0.00186EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/17 5:36 p.m.20 views

CVE-2023-34139

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affecte...

8.8CVSS9.3AI score0.00186EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/07/17 12:0 a.m.0 views

Zyxel USG FLEX 操作系统命令注入漏洞

Zyxel USG FLEX is a firewall from China Hopkins Zyxel. It provides flexible VPN options IPsec, SSL or L2TP to provide flexible and secure remote access for remote work and management. A security vulnerability exists in the Zyxel USG FLEX that stems from a command injection in the Free Time WiFi...

8.8CVSS8.1AI score0.00186EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/26 12:0 a.m.5 views

PT-2023-3607 · Zyxel · Zyxel Vpn +1

Name of the Vulnerable Software and Affected Versions: Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 Zyxel VPN series firmware versions 4.20 through 5.36 Patch 2 Description: A command injection vulnerability in the Free Time WiFi hotspot feature could allow an unauthenticated...

8.8CVSS8.9AI score0.00186EPSS
Exploits0References7
CNVD
CNVD
added 2019/06/28 12:0 a.m.1 views

Access Control Vulnerabilities in Multiple ZyXEL Products

ZyXEL ZyWall 310 and others are products of Taiwan, China-based ZyXEL Corporation.ZyXEL ZyWall 310 is a 310 series VPN firewall appliance.ZyXEL ZyWall 110 is a 110 series VPN firewall appliance.ZyXEL USG1900 is a next-generation unified security gateway appliance. A security vulnerability exists ...

9.1CVSS7AI score0.59063EPSS
Exploits1References1
OSV
OSV
added 2019/06/27 2:15 p.m.1 views

CVE-2019-12583

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service...

9.1CVSS7.3AI score0.59063EPSS
Exploits1References2
NVD
NVD
added 2019/06/27 2:15 p.m.13 views

CVE-2019-12583

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service...

9.1CVSS9.1AI score0.59063EPSS
Exploits1References2
Prion
Prion
added 2019/06/27 2:15 p.m.17 views

Improper access control

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service...

6.4CVSS9AI score0.59063EPSS
Exploits1References2Affected Software14
Cvelist
Cvelist
added 2019/06/27 2:1 p.m.19 views

CVE-2019-12583

Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service...

9.2AI score0.59063EPSS
Exploits1References2
CVE
CVE
added 2019/06/07 3:26 p.m.59 views

CVE-2018-5264

CVE-2018-5264 affects Ubiquiti UniFi 52 devices in hotspot mode. An attacker can bypass the intended 'free time' Wi‑Fi restrictions by requesting /guest/s/default/ to obtain a cookie, then using that cookie in /guest/s/default/login with the byfree parameter. CVSS metrics in the record indicate a...

5.9CVSS5.7AI score0.00662EPSS
Exploits1References1Affected Software1
0day.today
0day.today
added 2012/05/05 12:0 a.m.61 views

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Exploit for windows platform in category dos / poc Title: ====== Format Factory v2.95 - Buffer Overflow Vulnerabilities Introduction: ============= Format Factory is a multifunctional media converter. Provides functions below ... - All to MP4/3GP/MPG/AVI/WMV/FLV/SWF. - All to...

7AI score
Exploits0
Vulnerability Lab
Vulnerability Lab
added 2012/05/01 12:0 a.m.28 views

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory v2.95 - Buffer Overflow Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=536 http://www.vulnerability-lab.com/getcontent.php?id=539 Release Date: ============= 2012-05-01 Vulnerability...

7.1AI score
Exploits0
Rows per page
Query Builder