Lucene search
+L

10 matches found

EUVD
EUVD
•added 2026/09/16 12:31 a.m.•10 views

EUVD-2026-80035

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

5.3CVSS5.7AI score0.00281EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 10:17 p.m.•16 views

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

5.3CVSS0.00281EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 9:57 p.m.•35 views

CVE-2026-76863 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

5.3CVSS0.00281EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 9:57 p.m.•26 views

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling, specifically within filter_conns_dump_cgi.c and IGD_CgiCall.c. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry...

5.3CVSS5.7AI score0.00281EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/15 9:57 p.m.•15 views

CVE-2026-76863 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

5.3CVSS5.8AI score0.00281EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/01/17 12:00 a.m.•16 views

WAVLINK AC3000 Buffer Overflow Vulnerability (CNVD-2025-08328)

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a buffer overflow vulnerability, which originates from the qosbandwidth parameter of the qos.cgi qossettings function that fails to properly validate the length of the input data, which can be exploited...

9.1CVSS8.2AI score0.01338EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/14 3:15 p.m.•12 views

CVE-2024-39801

Multiple buffer overflow vulnerabilities exist in the qos.cgi qossettings functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A buffer...

7.2CVSS6.4AI score0.01338EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/01/14 2:21 p.m.•29 views

CVE-2024-39801

Multiple buffer overflow vulnerabilities exist in the qos.cgi qossettings functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A buffer...

9.1CVSS0.01338EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•14 views

WAVLINK AC3000 安全漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. The WAVLINK AC3000 suffers from a buffer overflow vulnerability, which originates from the qosbandwidth parameter of the qos.cgi qossettings function that fails to properly validate the length of the input data, which can be exploited...

9.1CVSS8.1AI score0.01338EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/08 2:15 p.m.•8 views

CVE-2022-30913

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqossetbandwidth parameter at /goform/aspForm...

10CVSS7.4AI score0.01665EPSS
SaveExploits1References2
Rows per page
Query Builder