Lucene search
+L

3982 matches found

Amazon
Amazon
added 2023/09/13 12:00 a.m.14 views

Important: php

Issue Overview: GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixed in 8.2.7, 8.1.20, 8.0.29 NOTE: https://github.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw NOTE:...

9.8CVSS7.1AI score0.21132EPSS
SaveExploits4
Amazon
Amazon
added 2023/09/13 12:00 a.m.7 views

Important: php

Issue Overview: GHSA-76gg-c692-v2mw: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP NOTE: Fixed in 8.2.7, 8.1.20, 8.0.29 NOTE: https://github.com/php/php-src/security/advisories/GHSA-76gg-c692-v2mw NOTE:...

9.8CVSS7.1AI score0.21132EPSS
SaveExploits4
CNVD
CNVD
added 2023/09/11 12:00 a.m.30 views

Apache Axis Input Validation Error Vulnerability

Apache Axis is the United States Apache Apache Foundation of an open source , XML-based Web services architecture . The product contains a SOAP server implemented in Java and C++ languages , as well as a variety of utility services and APIs to generate and deploy Web services applications. Apache...

9.8CVSS9.2AI score0.02564EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/09 11:06 a.m.7 views

OESA-2023-1623 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

5.5CVSS6.7AI score0.21132EPSS
SaveExploits4References4
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.24 views

D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.29 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.32 views

D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.24 views

D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.29 views

D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.28 views

D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.26 views

D-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.25 views

D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.33 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.24 views

D-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.20 views

D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.26 views

D-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.32 views

D-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.26 views

D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of XML data provided to the HNAP1 SOAP endpoint. The issu...

8.8CVSS7.3AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.25 views

D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS1 Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/07 12:00 a.m.26 views

D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of a request parameter provided to the HNAP1 SOAP endpoin...

8.8CVSS7.3AI score0.01187EPSS
SaveExploits0References1
Rows per page
Query Builder