Lucene search
K

2576 matches found

OSV
OSV
added 2022/12/13 7:15 p.m.3 views

CVE-2022-45005

IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the cmdgetpingoutput function...

9.8CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/13 12:0 a.m.7 views

CVE-2022-45005

IP-COM EW9 V15.11.0.149732 was discovered to contain a command injection vulnerability in the cmdgetpingoutput function...

8.1AI score0.04099EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/12/13 12:0 a.m.2 views

IP-COM EW9 操作系统命令注入漏洞

The IP-COM EW9 is a wireless router from IP-COM. An operating system command injection vulnerability exists in the IP-COM EW9 version V15.11.0.149732, which stems from a command injection vulnerability in the cmdgetpingoutput function...

9.8CVSS8.4AI score0.04099EPSS
Exploits1References2
OSV
OSV
added 2022/12/12 4:15 p.m.2 views

CVE-2022-45996

Tenda W20E V16.01.0.63392 is vulnerable to Command injection via cmdgetpingoutput...

7.2CVSS5.8AI score0.03848EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.1 views

Tenda W20E 操作系统命令注入漏洞

The Tenda W20E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W20E version V16.01.0.63392, which originates from a command injection vulnerability via cmdgetpingoutput...

7.2CVSS7.2AI score0.03848EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/12/12 12:0 a.m.3 views

PT-2022-27713 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E version 16.01.0.63392 Description: The issue is related to command injection via cmd get ping output. Recommendations: For Tenda W20E version 16.01.0.63392, consider restricting access to the cmd get ping output command until a pat...

7.2CVSS7.5AI score0.03848EPSS
Exploits1References5
OSV
OSV
added 2022/12/08 4:15 p.m.0 views

CVE-2022-45497

Tenda W6-S v1.0.0.4510 was discovered to contain a command injection vulnerability in the tpigetpingoutput function at /goform/exeCommand...

9.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/12/08 4:15 p.m.1 views

CVE-2022-45503

Tenda W6-S v1.0.0.4510 was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing...

7.5CVSS5.9AI score0.00354EPSS
Exploits1References1
Hive Pro Threat Advisories
Hive Pro Threat Advisories
added 2022/12/08 7:6 a.m.9 views

Buffer Overflow vulnerability in FreeBSD

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A vulnerability in FreeBSD ping has been discovered that could allow remote code execution. A remote host can trigger the memory safety bug, causing the ping program to crash. Ping runs inside a...

1.5AI score
Exploits0
CNNVD
CNNVD
added 2022/12/08 12:0 a.m.1 views

Tenda W6 缓冲区错误漏洞

The Tenda W6 is a wireless WiFi AP access point router from Tenda, China. A security vulnerability exists in Tenda W6-S v1.0.0.4510, which is caused by a stack overflow in the linkEn parameter via /goform/setAutoPing...

7.5CVSS7.4AI score0.00354EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/12/08 12:0 a.m.35 views

FreeBSD : FreeBSD -- ping stack buffer overflow (FreeBSD-SA-22:15.ping)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FreeBSD-SA-22:15.ping advisory. - ping contains a stack buffer overflow in the handling of incoming ICMP packets. A remote attacker can send specially...

6.5CVSS6.8AI score0.03546EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.2 views

PT-2022-27541 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: A command injection issue was found in the tpi get ping output function at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W6-S version 1.0.0.4510, consider disabling the tpi get pi...

9.8CVSS9.6AI score0.17859EPSS
Exploits1References3
The Hacker News
The Hacker News
added 2022/12/05 7:40 a.m.93 views

Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems

The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially exploited to crash the program or trigger remote code execution. The issue, assigned the identifier CVE-2022-23093, impacts all supported...

7.8CVSS1.1AI score0.03546EPSS
Exploits7
CNNVD
CNNVD
added 2022/11/30 12:0 a.m.2 views

FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD. An attacker exploiting this vulnerability could trigger a denial of service and possibly run code by triggering a FreeBSD buffer overflow via ping...

6.5CVSS6.1AI score0.03546EPSS
Exploits0References3
FreeBSD Advisory
FreeBSD Advisory
added 2022/11/29 12:0 a.m.17 views

FreeBSD-SA-22:15.ping

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:15.ping Security Advisory The FreeBSD Project Topic: Stack overflow in ping8 Category: core Module: ping Announced: 2022-11-29 Credits: NetApp, Inc. Affects:...

6.5CVSS6.2AI score0.03546EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/11/29 12:0 a.m.6 views

PT-2022-5681 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD versions prior to 13.1-RELEASE-p5 FreeBSD versions prior to 12.4-RC2-p2 FreeBSD versions prior to 12.3-RELEASE-p10 Description: The issue is related to the ping utility in FreeBSD, which reads raw IP packets from the network to proces...

10CVSS7.4AI score0.03546EPSS
Exploits0References21
FreeBSD
FreeBSD
added 2022/11/29 12:0 a.m.28 views

FreeBSD -- Stack overflow in ping(8)

Problem Description: ping reads raw IP packets from the network to process responses in the prpack function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the packet that generated an ICMP error. The quot...

6.5CVSS7.6AI score0.03546EPSS
Exploits0
VulnCheck KEV
VulnCheck KEV
added 2022/11/24 12:0 a.m.0 views

VulnCheck KEV: CVE-2022-37661

SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution RCE via the ping host feature...

9.8CVSS7.4AI score0.30742EPSS
Exploits5References1
OSV
OSV
added 2022/11/23 1:15 a.m.2 views

CVE-2020-23583

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diagpingadmin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system...

9.8CVSS6AI score0.07771EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.3 views

PT-2022-8677 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N version V2.2 Description: The issue occurs due to unauthenticated remote code execution when an attacker passes arbitrary commands with an IP-ADDRESS using " | " to execute commands on "/diag tracert admin.asp" in the...

9.8CVSS8.5AI score0.1899EPSS
Exploits0References6
Rows per page
Query Builder