Lucene search
K

1660 matches found

OSV
OSV
added 2023/04/14 2:15 p.m.3 views

CVE-2023-29801

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function...

9.8CVSS5.8AI score0.02014EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/04/14 12:0 a.m.4 views

TOTOLINK X18 命令注入漏洞

The TOTOLINK X18 is a mesh router system from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X18 version V9.1.0cu.2024B20220329, which stems from multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg...

9.8CVSS8.4AI score0.02014EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/04/14 12:0 a.m.25 views

CVE-2023-29801

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function...

10AI score0.02014EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.4 views

The vulnerability of D-Link DIR-882 wireless router’s microprogramming software allows a hacker to disclose protected information.

The vulnerability of the Syslog component in D-Link DIR-882 wireless routers relates to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

3.5CVSS7.1AI score0.00913EPSS
Exploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.18 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : rsyslog Vulnerability (NS-SA-2023-0028)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is use...

8.1CVSS7.5AI score0.03553EPSS
Exploits0References3
OSV
OSV
added 2023/03/31 7:15 p.m.3 views

CVE-2023-26925

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information...

7.5CVSS7.1AI score0.00913EPSS
Exploits1References2
NVD
NVD
added 2023/03/31 7:15 p.m.14 views

CVE-2023-26925

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information...

7.5CVSS7.2AI score0.00913EPSS
Exploits1References2
Prion
Prion
added 2023/03/31 7:15 p.m.14 views

Information disclosure

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information...

5CVSS7.1AI score0.00913EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.3 views

PT-2023-2230 · D Link · D-Link Dir-882

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-882 version 1.30 Description: An information disclosure issue exists in the Syslog functionality, allowing a specially crafted network request to disclose sensitive information. This is due to a lack of protection for service data....

7.5CVSS7.4AI score0.00913EPSS
Exploits1References6
CVE
CVE
added 2023/03/31 12:0 a.m.47 views

CVE-2023-26925

The CVE-2023-26925 entry describes an information-disclosure issue in the Syslog functionality of D-LINK DIR-882 (firmware 1.30). The vulnerability arises from insufficient protection of service data, allowing a specially crafted network request to disclose sensitive information. Affected compone...

7.5CVSS7.1AI score0.00913EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/31 12:0 a.m.5 views

CVE-2023-26925

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information...

6.4AI score0.00913EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/03/31 12:0 a.m.18 views

CVE-2023-26925

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information...

7.4AI score0.00913EPSS
Exploits1References2
Citrix
Citrix
added 2023/03/15 12:0 a.m.5 views

Syslog not being sent to external syslog server from Citrix Cloud Gateway Service (Adaptive Auth)

Configure external syslog server when using Cloud Gateway as a Service for Adaptive Authentication...

7.2AI score
Exploits0
Veracode
Veracode
added 2023/03/12 2:5 p.m.24 views

Denial Of Service (DoS)

syslog-ng is vulnerable to Denial Of Service DoS. The vulnerability exists due to the integer overflow in the RFC3164 parser in the library, which allows an attacker to cause an application crash through the syslog input that is mishandled by the TCP or network function...

7.5CVSS7.4AI score0.02403EPSS
Exploits0References10Affected Software1
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.14 views

Debian: Security Advisory (DSA-5369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02403EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.19 views

Debian: Security Advisory (DLA-72-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.6AI score0.07546EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.16 views

Debian: Security Advisory (DLA-584-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00779EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/03/06 12:0 a.m.17 views

Debian DSA-5369-1 : syslog-ng - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5369 advisory. - An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that i...

7.5CVSS7.4AI score0.02403EPSS
Exploits0References5
Debian
Debian
added 2023/03/05 7:25 p.m.33 views

[SECURITY] [DSA 5369-1] syslog-ng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5369-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 05, 2023 https://www.debian.org/security/faq -...

7.5CVSS7.7AI score0.02403EPSS
Exploits0
CBLMariner
CBLMariner
added 2023/03/02 4:18 a.m.35 views

CVE-2022-38725 affecting package syslog-ng 3.23.1-3

CVE-2022-38725 affecting package syslog-ng 3.23.1-3. A patched version of the package is available...

7.5CVSS7.2AI score0.02403EPSS
Exploits0
Rows per page
Query Builder