Lucene search
+L

7014 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/22 12:00 a.m.•5 views

CVE-2020-13391: Buffer Copy without Checking Size of Input

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS8.9AI score0.02552EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/22 12:00 a.m.•5 views

CVE-2020-13394: Buffer Copy without Checking Size of Input

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS8.9AI score0.02552EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/22 12:00 a.m.•8 views

CVE-2020-13390: Buffer Copy without Checking Size of Input

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS8.9AI score0.02552EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/22 12:00 a.m.•2 views

PT-2020-13514

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 1.0 V15.03.05.19 multi TD01 Tenda AC9 version 1.0 V15.03.05.196318 CN Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC15 version 1.0 V15.03.05.19 multi TD01 Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow...

9.8CVSS0.02552EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/05/22 12:00 a.m.•3 views

PT-2020-13517

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 1.0 V15.03.05.19 multi TD01 Tenda AC9 version 1.0 V15.03.05.196318 CN Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC15 version 1.0 V15.03.05.19 multi TD01 Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow...

9.8CVSS0.02552EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2020/05/22 12:00 a.m.•21 views

PT-2020-13516 · Tenda · Tenda Ac6 +3

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 1.0 V15.03.05.19 multi TD01 Tenda AC9 version 1.0 V15.03.05.196318 CN Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC15 version 1.0 V15.03.05.19 multi TD01 Tenda AC18 version 15.03.05.196318 CN Description: A buffer overfl...

9.8CVSS7.8AI score0.03283EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2020/05/22 12:00 a.m.•8 views

PT-2020-13515

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 1.0 V15.03.05.19 multi TD01 Tenda AC9 version 1.0 V15.03.05.196318 CN Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC15 version 1.0 V15.03.05.19 multi TD01 Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow...

9.8CVSS0.02552EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/22 12:00 a.m.•6 views

CVE-2020-13389: Buffer Copy without Checking Size of Input

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS8.9AI score0.02552EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/05/21 12:00 a.m.•241 views

Amazon Linux 2 : httpd (ALAS-2020-1427)

The version of httpd installed on the remote host is prior to 2.4.43-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1427 advisory. In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server...

6.1CVSS6.8AI score0.56691EPSS
SaveExploits0References5
Veracode
Veracode
•added 2020/05/15 2:23 a.m.•41 views

Open Redirection

httpd is vulnerable to open redirection. The modrewrite configurations is vulnerable to open redirect due to lack of validation in the URL...

6.1CVSS6.8AI score0.56691EPSS
SaveExploits0References46Affected Software12
IBM Security Bulletins
IBM Security Bulletins
•added 2020/05/06 1:02 p.m.•65 views

Security Bulletin: Vulnerability in Apache HTTPD affects IBM Integrated Analytics System

Summary Apache HTTPD is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-1312 DESCRIPTION: Apache HTTPD could allow a remote attacker to bypass security restrictions, caused by the failure to properly...

9.8CVSS1AI score0.15717EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/05/01 12:00 a.m.•106 views

EulerOS Virtualization for ARM 64 3.0.2.0 : httpd (EulerOS-SA-2020-1552)

According to the versions of the httpd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential...

6.1CVSS6.4AI score0.81466EPSS
SaveExploits9References5
OpenVAS
OpenVAS
•added 2020/04/30 12:00 a.m.•83 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2020-1552)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.6AI score0.81466EPSS
SaveExploits9References2
CNVD
CNVD
•added 2020/04/29 12:00 a.m.•21 views

Juniper Networks Junos OS Service Has Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS in J-Web and Web HTTP/HTTPS based services. An attacker could...

9.8CVSS7AI score0.04843EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/04/29 12:00 a.m.•48 views

Photon OS 1.0: Httpd PHSA-2020-1.0-0290

An update of the httpd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0290. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136106...

6.1CVSS6.6AI score0.56691EPSS
SaveExploits0References3
NVD
NVD
•added 2020/04/23 7:15 p.m.•26 views

CVE-2020-8798

httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network...

5.5CVSS5.6AI score0.00398EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/04/23 7:15 p.m.•12 views

CVE-2020-8798

httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network...

5.5CVSS5.5AI score0.00398EPSS
SaveExploits1References2
Prion
Prion
•added 2020/04/23 7:15 p.m.•32 views

Design/Logic Flaw

httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network...

2.1CVSS5.6AI score0.00398EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/04/23 6:03 p.m.•73 views

CVE-2020-8798

The vulnerability CVE-2020-8798 affects Juplink RX4-1500 routers (firmware versions v1.0.3–v1.0.5). The httpd service exposes an unauthenticated setup3.htm endpoint on the local network, which allows remote attackers to change or access router settings. The exposed detail in connected CNVD/NVD en...

5.5CVSS5.6AI score0.00398EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/04/23 6:03 p.m.•35 views

CVE-2020-8798

httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network...

5.6AI score0.00398EPSS
SaveExploits1References1
Rows per page
Query Builder