Lucene search
+L

516 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•35 views

D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•35 views

D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•27 views

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•25 views

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•35 views

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•42 views

D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•33 views

D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•28 views

D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•38 views

D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•28 views

D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•34 views

D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•28 views

D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•32 views

D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•31 views

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•32 views

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•39 views

D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/12/20 12:00 a.m.•275 views

D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/12 7:15 p.m.•33 views

CVE-2023-27314

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service...

7.5CVSS7.5AI score0.00844EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/12 7:15 p.m.•16 views

CVE-2023-27314

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service...

7.5CVSS5.8AI score0.00844EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/12 7:15 p.m.•31 views

Code injection

ONTAP 9 versions prior to 9.8P19, 9.9.1P16, 9.10.1P12, 9.11.1P8, 9.12.1P2 and 9.13.1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to cause a crash of the HTTP service...

5CVSS7.5AI score0.00844EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder