Lucene search
+L

2003 matches found

Cvelist
Cvelist
•added 2019/08/08 12:48 p.m.•35 views

CVE-2016-10864

NETGEAR EX7000 V1.0.0.421.0.94 devices allow XSS via the SSID...

5.2AI score0.00635EPSS
SaveExploits1References1
CVE
CVE
•added 2019/08/08 12:48 p.m.•62 views

CVE-2016-10864

The CVE-2016-10864 entry concerns NETGEAR EX7000 devices (V1.0.0.42_1.0.94). Red Hat and CNVD records confirm a Cross-Site Scripting (XSS) vulnerability in the device’s web application that can be triggered via the SSID, stemming from insufficient input validation. Impact details in the sources i...

5.2CVSS5.1AI score0.00635EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/08 12:00 a.m.•4 views

CVE-2017-18484: Improper Neutralization of Input During Web Page Generation

Cognitoys Dino devices allow XSS via the SSID...

6.1CVSS5.8AI score0.00826EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/08/08 12:00 a.m.•4 views

PT-2019-8419

Name of the Vulnerable Software and Affected Versions Cognitoys Dino devices affected versions not specified Description The issue allows for XSS via the SSID. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

6.1CVSS0.00826EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/08 12:00 a.m.•7 views

CVE-2016-10864: Improper Neutralization of Input During Web Page Generation

NETGEAR EX7000 V1.0.0.421.0.94 devices allow XSS via the SSID...

5.2CVSS5.8AI score0.00635EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/08/08 12:00 a.m.•4 views

PT-2019-7660

Name of the Vulnerable Software and Affected Versions NETGEAR EX7000 version 1.0.0.42 1.0.94 Description The issue allows for XSS via the SSID. Recommendations For NETGEAR EX7000 version 1.0.0.42 1.0.94, consider changing the SSID to a value that does not contain malicious code as a temporary...

5.2CVSS0.00635EPSS
SaveExploits1References3
NVD
NVD
•added 2019/08/07 1:15 p.m.•25 views

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

6.1CVSS6AI score0.00848EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/08/07 12:38 p.m.•30 views

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

6AI score0.00848EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/08/07 12:00 a.m.•4 views

PT-2019-8418

Name of the Vulnerable Software and Affected Versions ANNKE SP1 HD wireless camera version 3.4.1.1604071109 Description The issue allows for cross-site scripting XSS attacks via a crafted SSID. This means an attacker could potentially inject malicious code into the device by manipulating the SSID...

6.1CVSS0.00848EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/07 12:00 a.m.•5 views

CVE-2017-18483: Improper Neutralization of Input During Web Page Generation

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

6.1CVSS5.8AI score0.00848EPSS
SaveExploits1References2
NVD
NVD
•added 2019/07/03 6:15 p.m.•28 views

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

6.1CVSS6.1AI score0.00856EPSS
SaveExploits1References2
Prion
Prion
•added 2019/07/03 6:15 p.m.•31 views

Design/Logic Flaw

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

4.3CVSS6AI score0.00856EPSS
SaveExploits1References2
CVE
CVE
•added 2019/07/03 5:20 p.m.•77 views

CVE-2018-12715

Affected product: DIGISOL DG-HR3400 wireless router. Vulnerability: Cross-Site Scripting (XSS) via a modified SSID when the apssid value is unchanged, caused by lack of proper validation of client data by the web application. Impact: allows execution of client-side code in vulnerable contexts. Ro...

6.1CVSS6AI score0.00856EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2019/07/03 5:20 p.m.•34 views

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

6.1AI score0.00856EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/07/03 12:00 a.m.•3 views

PT-2019-8918

Name of the Vulnerable Software and Affected Versions DIGISOL DG-HR3400 affected versions not specified Description The issue concerns a problem where a modified SSID can lead to XSS when the apssid value remains unchanged. Recommendations At the moment, there is no information about a newer...

6.1CVSS0.00856EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/03 12:00 a.m.•9 views

CVE-2018-12715: Improper Neutralization of Input During Web Page Generation

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

6.1CVSS5.8AI score0.00856EPSS
SaveExploits1References2
CNVD
CNVD
•added 2019/06/20 12:00 a.m.•20 views

Unspecified vulnerability in SHEKAR Technology Endoscope (CNVD-2019-18874)

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. A security vulnerability exists in SHEKAR Technology Endoscope. An attacker can exploit the vulnerability to modify the default SSID and password, causing users to be unable to access the device or cause...

6.5CVSS6.8AI score0.0183EPSS
SaveExploits1References1
NVD
NVD
•added 2019/06/17 10:15 p.m.•31 views

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

8.8CVSS9.2AI score0.02522EPSS
SaveExploits1References3
NVD
NVD
•added 2019/06/17 10:15 p.m.•32 views

CVE-2017-10718

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious user connecting to the device can change the default SSID and password thereby denying the owner an access to his/her own device. This device acts as an Endoscop...

6.5CVSS6.6AI score0.0183EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2019/06/17 9:36 p.m.•38 views

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

9.2AI score0.02522EPSS
SaveExploits1References3
Rows per page
Query Builder