Lucene search
K

2576 matches found

OSV
OSV
added 2024/05/03 5:15 p.m.0 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

5.3CVSS6AI score0.00122EPSS
Exploits1References1
OSV
OSV
added 2024/05/03 2:15 a.m.0 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS6.3AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.1 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS8.1AI score0.02114EPSS
Exploits0References2
NVD
NVD
added 2024/05/03 2:15 a.m.13 views

CVE-2023-38120

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS9.3AI score0.02114EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 1:59 a.m.20 views

CVE-2023-38120 Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication...

8.8CVSS9AI score0.02114EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

Adtran SR400ac 安全漏洞

The Adtran SR400ac is a router from the US-based Adtran Corporation. A security vulnerability exists in the Adtran SR400ac that stems from the presence of a ping command injection remote code execution vulnerability, which can be exploited by an attacker to execute code in a root context...

8.8CVSS9.3AI score0.02114EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/05/03 12:0 a.m.3 views

PT-2024-25484 · Netis Systems · Netis-Systems Mex605

Name of the Vulnerable Software and Affected Versions: netis-systems MEX605 version 2.00.06 Description: The issue allows attackers to execute arbitrary OS commands via a crafted payload to the "ping test page". Recommendations: For netis-systems MEX605 version 2.00.06, consider restricting acces...

5.3CVSS7.8AI score0.00122EPSS
Exploits1References5
CVE
CVE
added 2024/05/03 12:0 a.m.71 views

CVE-2024-33793

CVE-2024-33793 affects netis-systems MEX605 v2.00.06. A crafted payload to the device’s ping test page allows attackers to execute arbitrary OS commands. Documented impact is arbitrary command execution with local attack vector, low privileges, no user interaction. No explicit exploitation detail...

5.3CVSS7.7AI score0.00122EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 12:0 a.m.13 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.6AI score0.00122EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/05/03 12:0 a.m.11 views

CVE-2024-33793

netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the ping test page...

7.7AI score0.00122EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/04/24 12:0 a.m.3 views

WordPress Plugin Import WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS8.7AI score0.00172EPSS
Exploits2References2
OSV
OSV
added 2024/04/19 4:15 a.m.1 views

CVE-2024-29961

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2024/04/19 4:15 a.m.11 views

CVE-2024-29961

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the...

8.2CVSS8.3AI score0.01239EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/19 12:0 a.m.1 views

Broadcom Brocade SANnav 信息泄露漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions v2.3.1 and v2.3.0a that originates when the Brocade SANav service periodically sends ping commands to gridgain.com in the background to check for available...

8.2CVSS9.3AI score0.01239EPSS
Exploits0References3
Broadcom
Broadcom
added 2024/04/17 12:0 a.m.27 views

Ping at regular intervals (CVE-2024-29961)

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com and ignite.apache.org to check if updates are available for the Component. This could make an unauthenticated, remote...

8.2CVSS8.3AI score0.01239EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/04/10 5:15 a.m.36 views

CVE-2023-6385

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

4.3CVSS6.5AI score0.00092EPSS
Exploits2References1
OSV
OSV
added 2024/04/10 5:15 a.m.1 views

CVE-2023-6385

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

4.3CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/10 5:0 a.m.16 views

CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

6.8AI score0.00092EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/04/10 5:0 a.m.20 views

CVE-2023-6385 WordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRF

The WordPress Ping Optimizer WordPress plugin through 2.35.1.3.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as clearing logs...

6.7AI score0.00092EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.5 views

PT-2024-14945 · WordPress · Wordpress Ping Optimizer

Name of the Vulnerable Software and Affected Versions: WordPress Ping Optimizer plugin versions through 2.35.1.3.0 Description: The issue concerns the lack of CSRF checks in certain areas, potentially allowing attackers to trick logged-in users into performing unwanted actions, such as clearing...

4.3CVSS6.2AI score0.00092EPSS
Exploits2References5
Rows per page
Query Builder