Lucene search
+L

419 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/11 12:00 a.m.14 views

The vulnerability of the HTTP service of D-Link G416 microprogrammed router software allows a hacker to execute arbitrary code.

The vulnerability of the D-Link G416 router’s microprogrammed software service lies in the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

8.8CVSS8.1AI score0.00916EPSS
SaveExploits0References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.22 views

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.29 views

D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.30 views

D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.21 views

D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.30 views

D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.22 views

D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.24 views

D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.34 views

D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.25 views

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.33 views

D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.22 views

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.186 views

D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.27 views

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.35 views

D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/12 7:15 p.m.29 views

CVE-2023-27314

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service...

7.5CVSS7.5AI score0.00642EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/12 7:15 p.m.7 views

CVE-2023-27314

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service...

7.5CVSS5.8AI score0.00642EPSS
SaveExploits0References1
Rows per page
Query Builder