Lucene search
+L

2714 matches found

ATTACKERKB
ATTACKERKB
added 2021/11/30 7:15 p.m.4 views

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

9.8CVSS7.3AI score0.21398EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/30 7:15 p.m.29 views

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

9.8CVSS0.21398EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/30 7:15 p.m.6 views

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

9.8CVSS7.3AI score0.21398EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/30 7:15 p.m.5 views

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

8.8CVSS7AI score0.04567EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2021/11/30 7:15 p.m.3 views

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

9CVSS7AI score0.04567EPSS
SaveExploits3References3
Prion
Prion
added 2021/11/30 7:15 p.m.13 views

Command injection

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

9CVSS8.8AI score0.04567EPSS
SaveExploits3References2Affected Software1
Prion
Prion
added 2021/11/30 7:15 p.m.28 views

Command injection

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

7.5CVSS9.6AI score0.21398EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/30 6:44 p.m.35 views

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

9.9AI score0.21398EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/30 12:0 a.m.7 views

Zoho Corporation Zoho ManageEngine Network Configuration Manager 命令注入漏洞

ZOHO ManageEngine Network Configuration Manager is a multi-vendor network change, configuration and compliance management Nccm solution from ZOHO USA. A command injection vulnerability exists in ZOHO ManageEngine Network Configuration Manager, which stems from the product's Ping feature that does...

9.8CVSS8.5AI score0.21398EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/30 12:0 a.m.8 views

Victure WR1200 操作系统命令注入漏洞

The Victure WR1200 is a router. A security vulnerability exists in the Victure WR1200 1.0.3 and prior versions, which stems from a lack of command filtering and restriction in the device's web interface, resulting in a command injection vulnerability that could be exploited by an attacker to inje...

9CVSS7.3AI score0.04567EPSS
SaveExploits3References3
CNVD
CNVD
added 2021/11/16 12:0 a.m.345 views

Tp-link TL-WR840N Code Injection Vulnerability

Tp-link TL-WR840N is a wireless router from Tp-link China. tp-link TL-WR840N EU v5 router TL-WR840NEU v5 171211 firmware previous version has a security vulnerability where the PING function in the device lacks filtering and escaping for data submitted by IP address and is vulnerable to to remote...

10CVSS3.5AI score0.75883EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.10 views

Lantronix PremierWave 2050 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 is vulnerable to OS command injection, which stems from a Web Manager Diagnostics:Ping feature that fails to properly filter special characters, commands,...

9.9CVSS6AI score0.06061EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:0 a.m.42 views

Lantronix PremierWave 2050 Web Manager Ping stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

9.9CVSS9.7AI score0.02845EPSS
SaveExploits1
NVD
NVD
added 2021/11/13 3:15 p.m.28 views

CVE-2021-41653

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a crafted payload in an IP address input field...

10CVSS0.75883EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/13 12:0 a.m.10 views

Tp-link TL-WR840N 代码注入漏洞

Tp-link TL-WR840N is a wireless router from Tp-link China. tp-link TL-WR840N EU v5 router TL-WR840NEU v5 171211 firmware previous version has a security vulnerability where the PING function in the device lacks filtering and escaping for data submitted by IP address and is vulnerable to to remote...

10CVSS6.5AI score0.75883EPSS
SaveExploits1References5
OSV
OSV
added 2021/11/10 12:15 p.m.6 views

CVE-2021-39474

Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability allows an attacker with privileges and network access through the ping.cmd component to execute commands on the device...

7.2CVSS5.9AI score0.01946EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.8 views

Connect Box EuroDOCSIS 3.0 Voice Gateway 操作系统命令注入漏洞

The Connect Box EuroDOCSIS 3.0 Voice Gateway is a home voice gateway device. An operating system command injection vulnerability exists in Connect Box EuroDOCSIS 3.0 Voice Gateway that allows an attacker with privileges and network access to execute commands on the device via the ping.cmd compone...

9CVSS7.7AI score0.01946EPSS
SaveExploits1References3
OSV
OSV
added 2021/10/19 1:15 p.m.7 views

CVE-2021-38470

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device...

9.1CVSS7.3AI score0.01091EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/19 1:15 p.m.15 views

Command injection

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a ping tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device...

6.5CVSS9.2AI score0.01091EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/10/09 12:0 a.m.77 views

Wire has unspecified vulnerabilities (CNVD-2022-10740)

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, the ability to make voice calls, send photos, and its ingenious way of saying hello, PING. Wire has a security vulnerability that allows users of Wire by...

4.6CVSS2.1AI score0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder