295 matches found
CVE-2021-32030
The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.438446630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handlereques...
CVE-2021-32030
CVE-2021-32030 affects ASUS GT-AC2900 routers (and Lyra Mini) with firmware versions before 3.0.0.4.386.42643 (Lyra Mini before 3.0.0.4_384_46630). The vulnerability enables an authentication bypass by processing remote input from an unauthenticated user, yielding unauthorized access to the admin...
CVE-2021-32030
The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.438446630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handlereques...
ASUS GT-AC2900 授权问题漏洞
ASUS GT-AC2900 is a router from ASUS China.A security vulnerability exists in versions prior to ASUS GT-AC2900 devices 3.0.0.4.386.42643, which allows the administrator application to allow bypass of authentication when handling remote input from unauthenticated users, which could be exploited by...
PT-2021-19636
Name of the Vulnerable Software and Affected Versions ASUS GT-AC2900 versions prior to 3.0.0.4.386.42643 Lyra Mini versions prior to 3.0.0.4 384 46630 Description The administrator application on ASUS GT-AC2900 and Lyra Mini devices allows authentication bypass when processing remote input from a...
Denial of Service Vulnerability in ASUS GT-AC5300
The GT-AC5300 is a gigabit tri-band wireless router. A denial of service vulnerability exists in the ASUS GT-AC5300, which can be exploited by attackers to cause a denial of service attack...
CVE-2020-5647
Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE...
gt-elektronik.de Cross Site Scripting vulnerability OBB-1458243
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unbreakable Enterprise kernel security update
5.4.17-2011.5.3uek - misc: pvpanic: add crash loaded event zhenwei pi Orabug: 31677096 - misc: pvpanic: move bit definition to uapi header file zhenwei pi Orabug: 31677096 - RDMA/netlink: Do not always generate an ACK for some netlink operations Hakon Bugge Orabug: 31666971 - bnxten: Fix statisti...
Access Control Error Vulnerability in Multiple Mitsubishi Electric Products
Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. An access control error vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker to...
gt-jira.niteco.com Cross Site Scripting vulnerability OBB-1204126
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Asus GT-AC5300 Stack Buffer Overflow (CVE-2018-17022)
A Buffer overflow vulnerability exists in Asus GT-AC5300. Successful exploitation of this vulnerability could result in a denial of service condition...
gt-elektronik.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1152004 Security Researcher geeknik Helped patch 8956 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting gt-elektronik.de website a...
USN-4184-1: Linux kernel vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...
Design/Logic Flaw
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a canvas element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation could allow for data theft. This...
CVE-2019-11742
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a canvas element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation could allow for data theft. This...
CVE-2018-17127
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
CVE-2018-17127
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
Null pointer dereference
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
CVE-2018-17127
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...