Lucene search
+L

19 matches found

Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•3 views

PT-2025-12991

Name of the Vulnerable Software and Affected Versions Telesquare TLR-2005KSH version 1.1.4 Description The issue is related to an unauthorized stack buffer overflow when requesting the "admin.cgi" endpoint with the setDdns parameter. Recommendations For Telesquare TLR-2005KSH version 1.1.4, as a...

9.8CVSS0.0044EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2020/07/30 1:05 p.m.•36 views

CVE-2020-14162

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root access via shell metacharacters to this script's setdns command...

7.6AI score0.00587EPSS
SaveExploits1References2
Mend
Mend
•added 2020/07/30 1:05 p.m.•1 views

CVE-2020-14162

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root access via shell metacharacters to this script's setdns command...

8.5CVSS0.00587EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/07/30 12:00 a.m.•1 views

PT-2020-13901

Name of the Vulnerable Software and Affected Versions Pi-Hole versions prior to 5.0 Description An issue was discovered where the local www-data user has sudo privileges to execute the pihole core script as root without a password. This could allow an attacker to obtain root access via shell...

7.8CVSS0.00587EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/30 12:00 a.m.•4 views

CVE-2020-14162: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root access via shell metacharacters to this script's setdns command...

7.8CVSS6.1AI score0.00587EPSS
SaveExploits1References3
CNVD
CNVD
•added 2018/11/08 12:00 a.m.•20 views

Foscam Opticam i5 Stack Buffer Overflow Vulnerability

Foscam Opticam i5 is an IP camera from FOSCAM. A stack buffer overflow vulnerability exists in the ONVIF devicemgmt SetDNS method of the Foscam Opticam i5 with system firmware 1.5.2.11 and application firmware 2.21.1.128. A remote attacker could exploit this vulnerability via the IPv4Address fiel...

9.8CVSS9.7AI score0.02318EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/11/08 12:00 a.m.•19 views

Foscam Opticam i5 Arbitrary OS Command Execution Vulnerability

Foscam Opticam i5 is an IP camera from FOSCAM. An arbitrary OS command execution vulnerability exists in the ONVIF devicemgmt SetDNS method of the Foscam Opticam i5 with system firmware 1.5.2.11 and application firmware 2.21.1.128. A remote attacker could exploit this vulnerability to execute...

10CVSS9.9AI score0.04969EPSS
SaveExploits1References1
OSV
OSV
•added 2018/11/07 6:29 p.m.•20 views

CVE-2018-19082

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field...

9.8CVSS6.2AI score0.02318EPSS
SaveExploits1References1
NVD
NVD
•added 2018/11/07 6:29 p.m.•27 views

CVE-2018-19081

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field...

10CVSS9.9AI score0.04969EPSS
SaveExploits1References1
OSV
OSV
•added 2018/11/07 6:29 p.m.•18 views

CVE-2018-19081

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field...

9.8CVSS6.1AI score0.04969EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/07 6:29 p.m.•24 views

Stack overflow

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field...

7.5CVSS9.6AI score0.02318EPSS
SaveExploits1References1Affected Software4
Cvelist
Cvelist
•added 2018/11/07 6:00 p.m.•42 views

CVE-2018-19081

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field...

9.9AI score0.04969EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/11/07 6:00 p.m.•33 views

CVE-2018-19082

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field...

9.7AI score0.02318EPSS
SaveExploits1References1
CVE
CVE
•added 2018/11/07 6:00 p.m.•101 views

CVE-2018-19081

Vulnerability summary (CVE-2018-19081) : Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 allow remote command execution via the ONVIF devicemgmt SetDNS method, using the IPv4Address field. This is documented as an arbitrary OS command execution vulnerab...

10CVSS9.8AI score0.04969EPSS
SaveExploits1References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/07 12:00 a.m.•7 views

CVE-2018-19082: Out-of-bounds Write

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field...

9.8CVSS8.5AI score0.02318EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/07 12:00 a.m.•10 views

CVE-2018-19081: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field...

10CVSS8.6AI score0.04969EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/11/07 12:00 a.m.•5 views

PT-2018-14795

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 Description A remote stack-based buffer overflow issue was discovered, allowing attackers to conduct attacks via the IPv4Address field in the ONVIF...

9.8CVSS0.02318EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/11/07 12:00 a.m.•3 views

PT-2018-14794

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 Description An issue was discovered that allows remote attackers to execute arbitrary OS commands. This is achieved through the ONVIF devicemgmt SetDNS...

10CVSS0.04969EPSS
SaveExploits1References3
CNVD
CNVD
•added 2017/06/09 12:00 a.m.•11 views

Foscam camera SetDNS buffer overflow vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A buffer overflow vulnerability exists in Foscam camera ONVIF SetDNS. An unauthenticated attacker can trigger a stack buffer overflow via the 'devicemgmt' 'SetDNS' method...

7.5AI score
SaveExploits0References1
Rows per page
Query Builder