Lucene search
+L

5971 matches found

NVD
NVD
added 2023/05/22 5:15 p.m.32 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.3AI score0.09075EPSS
SaveExploits2References1
Prion
Prion
added 2023/05/22 5:15 p.m.29 views

Command injection

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

5.8CVSS7.3AI score0.09075EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/05/22 12:00 a.m.40 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.6AI score0.09075EPSS
SaveExploits2References1
Rockylinux
Rockylinux
added 2023/05/18 7:17 p.m.111 views

2.4 bug fix update

An update is available for modhttp2, modmd, httpd, module.httpd, module.modmd, module.modhttp2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd package...

6.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/05/17 12:00 a.m.38 views

(Pwn2Own) Lexmark MC3224i fax_change_faxtrace_setting Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the faxchangefaxtracesettings script. The issue results from the lack...

8.8CVSS7.3AI score0.37835EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2023/05/16 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1932)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.7AI score0.57941EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:00 a.m.47 views

EulerOS Virtualization 2.10.0 : httpd (EulerOS-SA-2023-1932)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location...

9CVSS7AI score0.57941EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:00 a.m.44 views

EulerOS Virtualization 2.10.1 : httpd (EulerOS-SA-2023-1901)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location...

9CVSS7AI score0.57941EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/12 1:15 p.m.6 views

CVE-2023-2682

A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component MiniHTTPD. The manipulation of the argument address with the input ;id;uname$IFS-a leads to command injection. The attack...

6.3CVSS5.6AI score0.01948EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/05/10 12:00 a.m.48 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1847)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.84508EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2023/05/09 12:00 a.m.43 views

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2023-1805)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affect...

9.8CVSS7AI score0.84508EPSS
SaveExploits5References3
OpenVAS
OpenVAS
added 2023/05/09 12:00 a.m.44 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1823)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.84508EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2023/05/09 12:00 a.m.35 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1805)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.84508EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:00 a.m.46 views

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-1758)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header...

9CVSS7AI score0.57941EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/05/08 12:00 a.m.34 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1780)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.7AI score0.57941EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:00 a.m.30 views

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-1780)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header...

9CVSS7AI score0.57941EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/05/08 12:00 a.m.46 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1758)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.7AI score0.57941EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/05/08 12:00 a.m.42 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-1737)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.5AI score0.89885EPSS
SaveExploits1References2
Rosalinux
Rosalinux
added 2023/05/03 11:17 a.m.75 views

Advisory ROSA-SA-2023-2161

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: httpd-2.4.37-51.rv3.5.src.rpm CVE-ID: CVE-2022-28614 BDU-ID: 2022-04102 CVE-Crit: MEDIUM CVE-DESC: A vulnerability in the aprwrite function of the Apache HTTP Server web server is related to integer overflow. Exploitation of the...

9.8CVSS8.8AI score0.89885EPSS
SaveExploits6
NVD
NVD
added 2023/05/02 8:15 p.m.30 views

CVE-2023-29778

GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread...

9.8CVSS9.7AI score0.15876EPSS
SaveExploits1References1
Rows per page
Query Builder