Lucene search
K

1637 matches found

CNVD
CNVD
added 2020/11/19 12:0 a.m.1 views

TP-Link TL-WPA4220 Buffer Overflow Vulnerability

The TP-Link TL-WPA4220 is a 300Mbps AV600 Wi-Fi powerline extender. A buffer overflow vulnerability exists in the TP-Link TL-WPA4220. A remote attacker can exploit this vulnerability by sending a POST request to the /admin/syslog endpoint to cause a denial of service...

6.5CVSS7.3AI score0.00921EPSS
Exploits1References1
NVD
NVD
added 2020/11/18 4:15 p.m.12 views

CVE-2020-28005

httpd on TP-Link TL-WPA4220 devices hardware versions 2 through 4 allows remote authenticated users to trigger a buffer overflow causing a denial of service by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220EUV4201023...

6.5CVSS6.6AI score0.00921EPSS
Exploits1References2
OSV
OSV
added 2020/11/18 4:15 p.m.0 views

CVE-2020-28005

httpd on TP-Link TL-WPA4220 devices hardware versions 2 through 4 allows remote authenticated users to trigger a buffer overflow causing a denial of service by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220EUV4201023...

6.5CVSS6.2AI score
Exploits0References2
Prion
Prion
added 2020/11/18 4:15 p.m.12 views

Buffer overflow

httpd on TP-Link TL-WPA4220 devices hardware versions 2 through 4 allows remote authenticated users to trigger a buffer overflow causing a denial of service by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220EUV4201023...

3.5CVSS6.5AI score0.00921EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/11/18 3:27 p.m.10 views

CVE-2020-28005

httpd on TP-Link TL-WPA4220 devices hardware versions 2 through 4 allows remote authenticated users to trigger a buffer overflow causing a denial of service by sending a POST request to the /admin/syslog endpoint. Fixed version: TL-WPA4220EUV4201023...

6.6AI score0.00921EPSS
Exploits1References2
CNNVD
CNNVD
added 2020/11/18 12:0 a.m.0 views

TP-Link TL-WPA4220 缓冲区错误漏洞

The TP-Link TL-WPA4220 is a 300Mbps AV600 Wi-Fi powerline extender. A buffer overflow vulnerability exists in the TP-Link TL-WPA4220. A remote attacker can exploit this vulnerability by sending a POST request to the /admin/syslog endpoint to cause a denial of service...

6.5CVSS6.8AI score0.00921EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2020/11/11 12:0 a.m.5 views

openGauss: Enabling the Log Collector

The parameter loggingcollector specifies whether the log collector is enabled. The log collection process captures log messages sent to stderr or csvlog and writes them to log files, avoiding data loss during Syslog logging. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

7.3AI score
Exploits0References1
CNVD
CNVD
added 2020/11/09 12:0 a.m.1 views

Verve Connect VH510 Cross-Site Scripting Vulnerability

The Verve Connect VH510 is a hub for home applications from Verve Connect UK. The device regenerates and shapes and amplifies the received signals to extend the transmission distance of the network while concentrating all the nodes in the node centered on it. A cross-site scripting vulnerability...

6.1CVSS6.2AI score0.00328EPSS
Exploits1References1
Rockylinux
Rockylinux
added 2020/11/03 12:31 p.m.11 views

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...

1.8AI score
Exploits0
OSV
OSV
added 2020/10/23 12:22 p.m.7 views

SUSE-SU-2020:3024-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2020-10029: Fixed a stack corruption from range reduction of pseudo-zero bsc1165784 - Use posixspawn on popen bsc1149332, bsc1176013 - Correct locking and cancellation cleanup in syslog functions bsc1172085 - Fixed concurrent changes on nscd...

5.5CVSS6.8AI score0.0005EPSS
Exploits1References7
OSV
OSV
added 2020/10/19 6:15 p.m.0 views

CVE-2020-24651

A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

9.8CVSS7.8AI score0.08602EPSS
Exploits0References1
NVD
NVD
added 2020/10/19 6:15 p.m.9 views

CVE-2020-24651

A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

10CVSS0.08602EPSS
Exploits0References1
Citrix
Citrix
added 2020/10/15 12:0 a.m.7 views

How to create message action to log to syslog in Citrix NetScaler

This article describes how to create a message action that can be bound to a responder or rewrite policy that logs to syslog in NetScaler...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/09/29 12:0 a.m.32 views

EulerOS Virtualization for ARM 64 3.0.6.0 : perl-Sys-Syslog (EulerOS-SA-2020-2039)

According to the version of the perl-Sys-Syslog package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that perl can load modules from the current directory if not found in the module directories, via th...

7.8CVSS7.2AI score0.00317EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/09/29 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for perl-Sys-Syslog (EulerOS-SA-2020-2039)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00317EPSS
Exploits0References2
CNVD
CNVD
added 2020/09/27 12:0 a.m.3 views

Observium cross-site scripting vulnerability (CNVD-2020-62446)

Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to inject and store malicious JavaScript code via...

6.1CVSS6.5AI score0.0024EPSS
Exploits1References1
CNVD
CNVD
added 2020/09/27 12:0 a.m.1 views

Observium cross-site scripting vulnerability (CNVD-2020-62452)

Observium is a low-maintenance auto-discovery network monitoring platform that supports multiple device types, platforms and operating systems. Observium suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to inject and store malicious JavaScript code via...

6.1CVSS6.5AI score0.00317EPSS
Exploits1References1
OSV
OSV
added 2020/09/25 6:15 p.m.0 views

CVE-2020-25146

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting XSS due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via laid to the /syslogrules URI for editsyslogrule...

6.1CVSS5.8AI score0.00317EPSS
Exploits1References1
OSV
OSV
added 2020/09/25 5:15 p.m.1 views

CVE-2020-25139

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting XSS due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via laid to the /syslogrules URI for deletesyslogrule,...

6.1CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2020/09/25 4:31 p.m.13 views

CVE-2020-25139

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting XSS due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via laid to the /syslogrules URI for deletesyslogrule,...

6AI score0.0024EPSS
Exploits1References1
Rows per page
Query Builder