Lucene search
K

293 matches found

CNNVD
CNNVD
added 2025/11/20 12:0 a.m.2 views

Tenda AC21 安全漏洞

Tenda AC21 is a dual-band Gigabit wireless router launched by Tenda Technology, designed for home high-speed Internet needs, supporting 802.11acwave2 technology, dual-band concurrent rate up to 2033Mbps, of which the 5GHz band rate up to 1733Mbps, to meet the high-bandwidth applications, such as ...

4.3CVSS7.3AI score0.00259EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/11/14 12:1 a.m.2 views

CVE-2025-60691

A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The applycgi and blockcgi functions copy user-supplied input from the "url" CGI parameter into stack buffers v36, v29 using sprintf without bounds checking. Because these buffe...

8.8CVSS8.2AI score0.0078EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/11/13 12:0 a.m.4 views

CVE-2025-60702

A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the system.so binary. The setDiagnosisCfg function retrieves the ipDoamin parameter from user input via websGetVar and concatenates it directly into a ping system command executed via...

0.02272EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/30 6:31 p.m.3 views

EUVD-2025-37045

An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments unput parameter...

8.8CVSS7.5AI score0.00456EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.3 views

PT-2025-44435

Name of the Vulnerable Software and Affected Versions BusinessNext CRMnext version 10.8.3.0 Description An issue in BusinessNext CRMnext version 10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter. The issue involves the comments parameter, which can be...

8.8CVSS8.3AI score0.00456EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/30 12:0 a.m.4 views

BusinessNext CRMnext 安全漏洞

BusinessNext CRMnext is a customer management platform from BusinessNext India. A security vulnerability exists in BusinessNext CRMnext version 10.8.3.0, which stems from improper handling of the comments input parameter and could lead to remote execution of arbitrary code...

8.8CVSS7.1AI score0.00456EPSS
Exploits0References2
CVE
CVE
added 2025/10/30 12:0 a.m.10 views

CVE-2025-61196

CVE-2025-61196 affects BusinessNext CRMnext v10.8.3.0. The issue enables remote code execution via the comments input parameter due to improper handling of that input. Multiple sources (Red Hat, NVD, NVD mirrors, EUVD, CNNVD, CVE list) corroborate the vulnerability across the same product/version...

8.8CVSS7.6AI score0.00456EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/28 9:51 a.m.9 views

CVE-2025-46583

There is a Denial of Service(DoS)vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the Short Message Service interface, allowing an attacker to exploit it to carry out a DoS attack...

5.3CVSS6.8AI score0.00346EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

ZTE MC889A Pro 安全漏洞

The ZTE MC889A Pro is a router from China's ZTE Corporation ZTE. The ZTE MC889A Pro suffers from a denial of service vulnerability that originates from insufficient validation of the input parameters of the SMS service interface, which can be exploited by an attacker to cause a denial of service...

5.3CVSS6.7AI score0.00346EPSS
Exploits0References1
CVE
CVE
added 2025/10/07 12:37 p.m.11 views

CVE-2025-40889

CVE-2025-40889 involves a path traversal in Nozomi Networks Guardian/CMC Time Machine functionality caused by inadequate validation of two input parameters. An authenticated user with limited privileges can craft requests to potentially alter file structures/content in the /data directory or affe...

8.1CVSS6.3AI score0.0037EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2025/10/07 8:32 a.m.10 views

CVE-2025-11359

CVE-2025-11359 affects code-projects Simple Banking System 1.0, specifically the /transfermoney.php file. The vulnerability is a SQL injection caused by unsafely handling the ID parameter, exposing an attacker to execute SQL commands remotely. Public exploit indication is present in the sources. ...

8.8CVSS6.3AI score0.00299EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-1597

Malware in sbrugna...

7.5CVSS7.6AI score0.00854EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7849

Malware in sbrugna...

6.1CVSS6.3AI score0.01068EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-7285

Malware in sbrugna...

8.8CVSS8.6AI score0.01743EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-6385

Malware in sbrugna...

9CVSS8.7AI score0.01272EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-3516

Malware in sbrugna...

7.8CVSS7.6AI score0.00186EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-25344

Malware in sbrugna...

6.8CVSS6.6AI score0.00314EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-26353

Malware in sbrugna...

9.8CVSS9.4AI score0.00784EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-4775

Malware in sbrugna...

7.2CVSS6.4AI score0.00379EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-2140

Malware in sbrugna...

7.5CVSS6.4AI score0.02139EPSS
Exploits0References3
Rows per page
Query Builder