Lucene search
K

10 matches found

OSV
OSV
added 2025/05/18 5:15 a.m.2 views

CVE-2025-4860

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

4.8CVSS3.8AI score0.00243EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/18 5:0 a.m.21 views

CVE-2025-4860 D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

4.8CVSS0.00243EPSS
Exploits1References5
CVE
CVE
added 2025/05/18 5:0 a.m.39 views

CVE-2025-4860

The CVE-2025-4860 entry concerns D-Link DAP-2695 (Static Pool Settings Page) where an input parameter f_mac in /adv_dhcps.php enables cross-site scripting. Multiple sources confirm a remote exploitation path and that affected devices are no longer maintained by the vendor. Public disclosures exis...

4.8CVSS6.4AI score0.00243EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/18 5:0 a.m.6 views

CVE-2025-4860 D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

4.8CVSS3.5AI score0.00243EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/18 12:0 a.m.2 views

PT-2025-21831 · D Link · D-Link Dap-2695

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2695 version 120b36r137 ALL en 20210528 Description: A vulnerability has been found in the Static Pool Settings Page component, specifically in the /adv dhcps.php file. The manipulation of the f mac argument leads to cross-site...

4.8CVSS3.3AI score0.00243EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2023/11/02 12:0 a.m.25 views

F5 Networks BIG-IP : BIG-IP DNS vulnerability (K45407662)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.4 / 15.1.3.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K45407662 advisory. - On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all version...

7.5CVSS7.8AI score0.00891EPSS
Exploits0References2
CVE
CVE
added 2021/09/14 5:40 p.m.59 views

CVE-2021-23032

CVE-2021-23032 affects BIG-IP DNS. When a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel (TMM) to terminate, leading to a DoS of the data plane. Affected branches include 16.0.x (16.0.0–16.0.1), 15...

7.5CVSS7.5AI score0.00891EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/14 5:40 p.m.19 views

CVE-2021-23032

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...

7.7AI score0.00891EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/08/24 12:0 a.m.1 views

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP DNS, which stems from the fact that when the BIG-IP DNS system is...

7.5CVSS5.7AI score0.00891EPSS
Exploits0References5
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

GlassFish Application Server resourceNode/jmsConnectionNew.jsf - Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...

7.1AI score
Exploits0
Rows per page
Query Builder