Lucene search
K

746 matches found

Prion
Prion
added 2023/03/29 7:15 p.m.24 views

Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dsiwriteinit function. The issue results from the lack of proper validation of the length o...

7.5CVSS9.5AI score0.18903EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2023/03/29 7:15 p.m.13 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

4.7CVSS6.9AI score0.01085EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2023/03/29 7:15 p.m.18 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

5.8CVSS9AI score0.01432EPSS
Exploits1References2Affected Software24
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.17 views

CVE-2022-27644

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files...

5CVSS8.7AI score0.00336EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.15 views

CVE-2022-43622

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Login requests to the web management portal. When...

8.8CVSS9AI score0.01006EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.14 views

CVE-2022-43626

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01085EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.24 views

CVE-2022-43633

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01085EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.30 views

CVE-2022-43629

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01085EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.27 views

CVE-2022-42433

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841NUSV14220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

6.4CVSS8.2AI score0.00603EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.22 views

CVE-2022-43630

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of http requests to the web management portal. When...

8.8CVSS9AI score0.01006EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.21 views

CVE-2022-43623

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01085EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.29 views

CVE-2022-43619

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01014EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.29 views

CVE-2022-43628

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01085EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.38 views

CVE-2022-43631

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.8CVSS7.1AI score0.01085EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.41 views

CVE-2022-27641

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB module. The issue results from the lack of...

8.8CVSS9.1AI score0.01234EPSS
Exploits0References2
NVD
NVD
added 2023/03/28 7:15 p.m.23 views

CVE-2022-24973

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on...

8CVSS7.4AI score0.00718EPSS
Exploits0References1
NVD
NVD
added 2023/03/28 7:15 p.m.25 views

CVE-2022-24674

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the privet API. The issue results from the lack of...

8.8CVSS8.9AI score0.0111EPSS
Exploits0References2
NVD
NVD
added 2023/03/28 7:15 p.m.18 views

CVE-2022-23122

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the setfilparams function. The issue results from the lack of proper validation of the length o...

9.8CVSS9.7AI score0.04409EPSS
Exploits0References6
NVD
NVD
added 2023/03/28 7:15 p.m.15 views

CVE-2022-23124

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getfinderinfo method. The issue results from the lack of proper validation of...

9.8CVSS7.4AI score0.02814EPSS
Exploits0References6
OSV
OSV
added 2023/03/28 7:15 p.m.28 views

CVE-2022-23121

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

9.8CVSS9.9AI score
Exploits0References7
Rows per page
Query Builder