Lucene search
+L

33133 matches found

Vulnrichment
Vulnrichment
added 2024/11/19 12:00 a.m.8 views

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

8.1AI score0.0581EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:00 a.m.22 views

The vulnerability in the wizpppoe.cgi script of the microprogramming software for Netgear XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the wizpppoe.cgi microprogramming software of Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:00 a.m.12 views

The vulnerability in the genie_pptp.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniepptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 stems from the practice of copying buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerabili...

5.7CVSS5.5AI score0.00305EPSS
SaveExploits0References2Affected Software4
CNNVD
CNNVD
added 2024/11/19 12:00 a.m.5 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a suspicious RCU usage warning in the iptunnelfind function...

5.5CVSS6.5AI score0.00247EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/19 12:00 a.m.71 views

CVE-2024-52711

CVE-2024-52711 affects the D-Link DI-8100 router (v16.07.26A1). The vulnerability is a Buffer Overflow in the ip_position_asp function triggered via the ip parameter, caused by insufficient validation of the input data length/size. Documented implications indicate potential denial of service due ...

5.7CVSS7AI score0.00625EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:00 a.m.13 views

The vulnerability in the geniepppoe.cgi script of Netgear’s router software models R7000P and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniepppoe.cgi microprogramming software for Netgear XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause...

5.7CVSS5.5AI score0.00312EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:00 a.m.12 views

The vulnerability in the wiz_pptp.cgi script of the Netgear R8500, XR300, R7000P, and R6400 v2 router software allows a hacker to cause a service failure.

The vulnerability in the wizpptp.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a...

5.7CVSS5.5AI score0.00305EPSS
SaveExploits0References2Affected Software4
Positive Technologies
Positive Technologies
added 2024/11/19 12:00 a.m.13 views

PT-2024-34316 · Unknown · Show Visitor Ip Address

Name of the Vulnerable Software and Affected Versions: Show Visitor IP Address versions 0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject malicious...

6.5CVSS6.3AI score0.00377EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/19 12:00 a.m.31 views

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

0.0581EPSS
SaveExploits1References2
NVD
NVD
added 2024/11/18 4:15 p.m.80 views

CVE-2024-0012

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

9.8CVSS0.99718EPSS
SaveExploits15References4
OSV
OSV
added 2024/11/18 4:15 p.m.8 views

CVE-2024-0012

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

9.8CVSS5.8AI score0.99718EPSS
SaveExploits18References4
OSV
OSV
added 2024/11/18 4:15 p.m.14 views

CVE-2021-1379

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...

6.5CVSS6AI score0.00328EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/18 4:15 p.m.21 views

CVE-2021-1379

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...

6.5CVSS0.00328EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/18 3:47 p.m.577 views

CVE-2024-0012

CVE-2024-0012 is an authentication bypass in Palo Alto Networks PAN-OS management web interface that lets an unauthenticated, network-reachable attacker gain PAN-OS administrator privileges. Affected products/versions: PAN-OS 10.2, 11.0, 11.1, and 11.2; Cloud NGFW and Prisma Access are not impact...

9.8CVSS7.5AI score0.99718EPSS
SaveIn wildExploits15References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/18 3:47 p.m.79 views

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

9.3CVSS8.2AI score0.99718EPSS
SaveExploits15References1
Cvelist
Cvelist
added 2024/11/18 3:42 p.m.26 views

CVE-2021-1379 Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...

6.5CVSS0.00328EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/18 3:42 p.m.18 views

CVE-2021-1379 Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are...

6.5CVSS6.9AI score0.00328EPSS
SaveExploits0References2
Palo Alto Networks
Palo Alto Networks
added 2024/11/18 2:20 p.m.32 views

PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. This issue is applicable to PAN-OS 10.1, PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS...

7.2CVSS7AI score0.94701EPSS
SaveExploits14References1
NVD
NVD
added 2024/11/18 5:15 a.m.44 views

CVE-2024-52940

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID...

7.5CVSS0.01245EPSS
SaveExploits1References3
OSV
OSV
added 2024/11/18 5:15 a.m.7 views

CVE-2024-52940

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID...

7.5CVSS5.8AI score0.01245EPSS
SaveExploits1References3
Rows per page
Query Builder