Lucene search
+L

4432 matches found

Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•3 views

PT-2022-22234

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the DelDNSHnList interface at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting...

9.8CVSS0.01187EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•7 views

CVE-2022-34606: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•18 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the ipqoslanipeditlist interface of goform/aspForm was found to contain a stack overflow...

9.8CVSS8.6AI score0.01187EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•23 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the DelDNSHnList interface of oform/aspForm was found to contain a stack overflow...

9.8CVSS8.6AI score0.01187EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•4 views

PT-2022-22231

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the EditSTList interface at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R200 device. Recommendations For H3C Magic R200 versi...

9.8CVSS0.01187EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•2 views

PT-2022-22236

Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the HOST parameter at the "/dotrace.asp" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting access to the...

9.8CVSS0.01187EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•6 views

CVE-2022-34602: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•23 views

H3C Magic R200 缓冲区错误漏洞

H3C Magic R200 is a wireless router device. H3C Magic R200 AJAX/ajaxget processing ajaxmsg parameter has a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash the service or execute arbitrary code in application context...

9.8CVSS6.7AI score0.01187EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•9 views

CVE-2022-34599: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•7 views

CVE-2022-34600: Out-of-bounds Write

H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm...

9.8CVSS8.2AI score0.01187EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/19 3:15 p.m.•9 views

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

8.8CVSS7.3AI score0.00945EPSS
SaveExploits0References2
CVE
CVE
•added 2022/07/19 2:07 p.m.•91 views

CVE-2022-2192

CVE-2022-2192 describes a forced browsing vulnerability in HYPR Server spanning versions 6.10 to 6.15.1. An attacker with a valid one-time recovery token can perform path tampering on the Magic Link page to elevate privileges, yielding a remote, network-attack surface with high impact to confiden...

8.8CVSS8.5AI score0.00945EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/07/19 12:00 a.m.•18 views

HYPR Server 安全漏洞

HYPR and HYPR Server are both products of HYPR, Inc.HYPR is a security application that implements password-less security.HYPR Server is a server. A security vulnerability exists in HYPR Server versions 6.10 through 6.15.1, which stems from a forced browsing vulnerability that allows a remote...

8.8CVSS8.1AI score0.00945EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/19 12:00 a.m.•8 views

CVE-2022-2192: Direct Request

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

8.8CVSS7.8AI score0.00945EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2022/07/18 10:45 a.m.•18 views

magic-bike-lapalma.com Cross Site Scripting vulnerability OBB-2793266

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2022/07/15 12:00 a.m.•35 views

HUAWEI EMUI/Magic UI licensing issue vulnerability

HUAWEI EMUI / Magic UI are both an Android-based mobile operating system developed by China's Huawei HUAWEI. HUAWEI EMUI / Magic UI has an authorization issue vulnerability, which stems from improper control of the Bluetooth module permissions and is used by attackers to affect the integrity of t...

6.5CVSS3.4AI score0.00257EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•18 views

HUAWEI Magic UI 安全漏洞

HUAWEI Magic UI is a smart device operating system from Chinese company Huawei HUAWEI. A security vulnerability exists in HUAWEI Magic UI version 4.0.0, which is exploited by attackers to compromise device confidentiality...

6.5CVSS6.7AI score0.00275EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/07/08 12:00 a.m.•60 views

Huawei Emui and Magic UI Buffer Overflow Vulnerability (CNVD-2022-57612)

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. buffer overflow vulnerability exists in Huawei Emui and Magic UI, which can be exploited by attackers to cause a buffer overflow and execute arbitrary code on the system, or...

6.5CVSS4.6AI score0.00287EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/07/06 5:15 p.m.•18 views

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

9.8CVSS6AI score0.07194EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/06 5:15 p.m.•9 views

CVE-2022-34598

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands...

9.8CVSS6.1AI score0.07194EPSS
SaveExploits1References2
Rows per page
Query Builder