Lucene search
+L

3819 matches found

CNNVD
CNNVD
added 2022/07/20 12:0 a.m.8 views

H3C Magic R200 缓冲区错误漏洞

H3C Magic R200 is a wireless router device. H3C Magic R200 AJAX/ajaxget processing ajaxmsg parameter has a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash the service or execute arbitrary code in application context...

9.8CVSS6.7AI score0.01128EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.10 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version that originates from a stack overflow contained in /ihomes/app...

9.8CVSS8.5AI score0.0128EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/19 3:15 p.m.3 views

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

8.8CVSS7.3AI score0.00874EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/19 2:7 p.m.68 views

CVE-2022-2192

CVE-2022-2192 describes a forced browsing vulnerability in HYPR Server spanning versions 6.10 to 6.15.1. An attacker with a valid one-time recovery token can perform path tampering on the Magic Link page to elevate privileges, yielding a remote, network-attack surface with high impact to confiden...

8.8CVSS8.5AI score0.00874EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/07/19 12:0 a.m.7 views

HYPR Server 安全漏洞

HYPR and HYPR Server are both products of HYPR, Inc.HYPR is a security application that implements password-less security.HYPR Server is a server. A security vulnerability exists in HYPR Server versions 6.10 through 6.15.1, which stems from a forced browsing vulnerability that allows a remote...

8.8CVSS8.1AI score0.00874EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2022/07/18 10:45 a.m.17 views

magic-bike-lapalma.com Cross Site Scripting vulnerability OBB-2793266

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2022/07/15 12:0 a.m.28 views

HUAWEI EMUI/Magic UI licensing issue vulnerability

HUAWEI EMUI / Magic UI are both an Android-based mobile operating system developed by China's Huawei HUAWEI. HUAWEI EMUI / Magic UI has an authorization issue vulnerability, which stems from improper control of the Bluetooth module permissions and is used by attackers to affect the integrity of t...

6.5CVSS3.4AI score0.00257EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/07/12 12:0 a.m.9 views

HUAWEI Magic UI 安全漏洞

HUAWEI Magic UI is a smart device operating system from Chinese company Huawei HUAWEI. A security vulnerability exists in HUAWEI Magic UI version 4.0.0, which is exploited by attackers to compromise device confidentiality...

6.5CVSS6.7AI score0.00275EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/07/08 12:0 a.m.51 views

Huawei Emui and Magic UI Buffer Overflow Vulnerability (CNVD-2022-57612)

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. buffer overflow vulnerability exists in Huawei Emui and Magic UI, which can be exploited by attackers to cause a buffer overflow and execute arbitrary code on the system, or...

6.5CVSS4.6AI score0.00287EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/06 5:15 p.m.10 views

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

9.8CVSS6AI score0.06833EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/06 5:15 p.m.47 views

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

9.8CVSS0.06833EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/06 5:15 p.m.6 views

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

9.8CVSS6.1AI score0.06833EPSS
SaveExploits1References2
Prion
Prion
added 2022/07/06 5:15 p.m.30 views

Command injection

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

7.5CVSS9.6AI score0.06833EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/06 5:0 p.m.47 views

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

9.9AI score0.06833EPSS
SaveExploits1References1
CVE
CVE
added 2022/07/06 5:0 p.m.88 views

CVE-2022-34598

The CVE-2022-34598 vulnerability affects H3C Magic R100 devices (V200R004 and V100R005) where the udpserver exposes port 9034. This misconfiguration enables attackers to execute arbitrary commands. Connected sources confirm the affected models and port, stating the issue originates from the udpse...

9.8CVSS9.6AI score0.06833EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/06 12:0 a.m.10 views

H3C Magic R100 安全漏洞

H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100, which stems from the updserver service opening an official backdoor on port 9034, allowing an attacker to execute arbitrary commands...

9.8CVSS8.8AI score0.06833EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/07/05 12:0 a.m.9 views

HUAWEI HarmonyOS 安全漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. buffer overflow vulnerability exists in Huawei Emui and Magic UI, which can be exploited by attackers to cause a buffer overflow and execute arbitrary code on the system, or...

6.5CVSS6.9AI score0.00287EPSS
SaveExploits0References5
OSV
OSV
added 2022/06/23 5:15 p.m.6 views

UBUNTU-CVE-2022-33067

Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions getmagic in lrzip.c and Predictor::init in libzpaq/libzpaq.cpp. These vulnerabilities allow attackers to cause a Denial of Service via unspecified vectors...

5.5CVSS5.8AI score0.00611EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.6 views

lrzip 安全漏洞

lrzip is a compression utility. lrzip v0.651 contains a denial of service vulnerability that originates in getmagic in lrzip.c and Predictor::init function in libzpaq/libzpaq.cpp, which can be exploited by attackers to cause a denial of service impact...

5.5CVSS5.6AI score0.00611EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/06/16 12:0 a.m.28 views

Huawei EMUI and Magic UI Denial of Service Vulnerability (CNVD-2023-01057)

Huawei EMUI is a mobile operating system based on Android development.Huawei Magic UI is a smart device operating system. A security vulnerability exists in Huawei EMUI and Magic UI, which stems from a configuration flaw in the Secure Operating System module that can be exploited by an attacker t...

6.3AI score
SaveExploits0References1
Rows per page
Query Builder