Lucene search
+L

3178 matches found

Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•36 views

PT-2024-3223 · D Link · D-Link Dap-3662 +9

Name of the Vulnerable Software and Affected Versions: D-Link DAP products versions DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 Description: The issue is related to a Cross Site Scripting vulnerability in the session login.php component of...

10CVSS7AI score0.00615EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/22 12:00 a.m.•7 views

CVE-2024-28436: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 allows a remote attacker to execute arbitrary code via the reload parameter in the sessionlogin.php component...

6.1CVSS6.6AI score0.00615EPSS
SaveExploits0References2
Mend
Mend
•added 2024/04/13 8:31 p.m.•6 views

CVE-2024-3740

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9. This issue affects the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated remotely. The exploit has...

9.8CVSS0.00815EPSS
SaveExploits1References7
osv-cve
osv-cve
•added 2024/04/13 8:31 p.m.•18 views

CVE-2024-3740 cym1102 nginxWebUI reload exec deserialization

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9. This issue affects the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated remotely. The exploit has...

6.3CVSS6AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/04/13 12:00 a.m.•19 views

PT-2024-27520 · Unknown · Cym1102 Nginxwebui

Name of the Vulnerable Software and Affected Versions: cym1102 nginxWebUI versions up to 3.9.9 Description: A critical issue has been found in the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated...

9.8CVSS6.6AI score0.00815EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/13 12:00 a.m.•9 views

CVE-2024-3740: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, has been found in cym1102 nginxWebUI up to 3.9.9. This issue affects the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated remotely. The exploit has...

9.8CVSS5.2AI score0.00815EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/04/12 12:00 a.m.•27 views

Cisco IOS XE Software OSPFv2 DoS (cisco-sa-iosxe-ospf-dos-dR9Sfrxp)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the OSPF version 2 OSPFv2 feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial...

7.4CVSS5.6AI score0.00256EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/04/12 12:00 a.m.•32 views

Cisco IOS XE Software Locator ID Separation Protocol DoS (cisco-sa-lisp-3gYXs3qP)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload...

8.6CVSS5.5AI score0.00803EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/04/12 12:00 a.m.•45 views

Cisco IOS XE Software DHCP Snooping with Endpoint Analytics DoS (cisco-sa-dhcp-dos-T3CXPO9z)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of servic...

8.6CVSS5.6AI score0.00816EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/04/04 12:00 a.m.•177 views

Cisco Access Points Managed from WLC DoS (cisco-sa-ap-dos-h9TGGX6W)

According to its self-reported version, Cisco access points managed by this Cisco Wireless LAN Controller are affected by a denial of service vulnerability. Due to insufficient input validation of certain IPv4 packets, an unauthenticated, remote attacker can causing attached access points to relo...

8.6CVSS5.7AI score0.00633EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/04/04 12:00 a.m.•64 views

Cisco Access Points Managed from Catalyst DoS (cisco-sa-ap-dos-h9TGGX6W)

According to its self-reported version, Cisco access points managed by this Cisco Catalyst 9800 Series Wireless Controller are affected by a denial of service vulnerability. Due to insufficient input validation of certain IPv4 packets, an unauthenticated, remote attacker can causing attached acce...

8.6CVSS5.6AI score0.00633EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/27 5:22 p.m.•48 views

CVE-2024-20308

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properl...

8.6CVSS8.7AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/27 5:15 p.m.•19 views

CVE-2024-20311

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

7.5CVSS5.8AI score0.00803EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/27 5:15 p.m.•27 views

CVE-2024-20311

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

8.6CVSS8.5AI score0.00803EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 5:02 p.m.•121 views

CVE-2024-20309

CVE-2024-20309 affects Cisco IOS XE Software AUX port handling. The vulnerability arises from incorrect processing of specific ingress data when flow-control hardware on the AUX port is enabled, allowing an authenticated, local attacker to reverse-telnet to the AUX port and send data to cause a d...

5.6CVSS6.7AI score0.00102EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/27 4:51 p.m.•48 views

CVE-2024-20276

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this...

7.4CVSS7.5AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 4:51 p.m.•96 views

CVE-2024-20276

CVE-2024-20276 describes a DoS vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches. The issue stems from improper handling of process-switched traffic, which could allow an unauthenticated, adjacent attacker to send crafted traffic and cause the affected device to reload, ...

7.4CVSS6.8AI score0.00291EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/27 4:51 p.m.•17 views

CVE-2024-20276

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this...

7.4CVSS7.4AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/27 4:50 p.m.•96 views

CVE-2024-20311

Cisco IOS and IOS XE Software are affected by a LISP processing vulnerability (CVE-2024-20311) that can be exploited remotely by sending a crafted LISP packet, causing an unauthenticated device to reload and suffer DoS. The issue stems from incorrect handling of LISP packets in the Locator ID Sep...

8.6CVSS7.1AI score0.00803EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/27 4:50 p.m.•17 views

CVE-2024-20311

A vulnerability in the Locator ID Separation Protocol LISP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit...

8.6CVSS7.1AI score0.00803EPSS
SaveExploits0References1
Rows per page
Query Builder