Lucene search
+L

38 matches found

Vulnrichment
Vulnrichment
•added 2026/04/26 7:15 a.m.•10 views

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS4.1AI score0.01279EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/26 7:15 a.m.•40 views

CVE-2026-7026

The CVE concerns D-Link DGS-3420 firmware 1.50.018 with a cross-site scripting vulnerability in the System Information Settings Page, caused by manipulation of the System Name argument. The issue allows remote exploitation and the exploit has been publicly disclosed. Supported metrics indicate CV...

6.8CVSS4.1AI score0.01279EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/04/26 7:15 a.m.•54 views

CVE-2026-7026 D-Link DGS-3420 System Information Settings cross site scripting

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS0.01279EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•25 views

PT-2026-35207

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.7AI score0.01279EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/26 12:00 a.m.•4 views

CVE-2026-7026: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

6.8CVSS3.9AI score0.01279EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/26 12:00 a.m.•22 views

D-Link DGS-3420 跨站脚本漏洞

The D-Link DGS-3420 is a managed Gigabit Ethernet switch designed for enterprise networks by D-Link Corporation. The version 1.50.018 of the D-Link DGS-3420 contains a cross-site scripting vulnerability. This vulnerability arises from improper handling of the System Name parameter in the System...

6.8CVSS5.6AI score0.01279EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 8:33 p.m.•22 views

CVE-2021-37379

Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

5.4CVSS6.3AI score0.00589EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/03 6:15 p.m.•30 views

CVE-2021-37377

Cross Site Scripting XSS vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates...

5.4CVSS5.4AI score0.00589EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/03 6:15 p.m.•30 views

CVE-2021-37379

Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

5.4CVSS5.4AI score0.00589EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/03 6:15 p.m.•39 views

CVE-2021-37378

Cross Site Scripting XSS vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

5.4CVSS5.4AI score0.00589EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/02/03 6:15 p.m.•11 views

CVE-2021-37379

Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

5.4CVSS6.4AI score0.00589EPSS
SaveExploits1References2
OSV
OSV
•added 2023/02/03 6:15 p.m.•26 views

CVE-2021-37378

Cross Site Scripting XSS vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

5.4CVSS6AI score0.00589EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/03 6:15 p.m.•61 views

CVE-2021-37373

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

5.4CVSS5.4AI score0.00566EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/02/03 6:15 p.m.•15 views

CVE-2021-37375

Cross Site Scripting XSS vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any...

5.4CVSS6.4AI score0.00566EPSS
SaveExploits1References2
OSV
OSV
•added 2023/02/03 6:15 p.m.•14 views

CVE-2021-37373

Cross Site Scripting XSS vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware...

5.4CVSS6AI score0.00566EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/03 6:15 p.m.•18 views

CVE-2021-37376

Cross Site Scripting XSS vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving...

5.4CVSS6AI score0.00614EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/02/03 12:00 a.m.•17 views

Teradek Bond 跨站脚本漏洞

Teradek Bond is Teradek's portable, real-time streaming media delivery solution. A security vulnerability exists in Teradek Bond version 7.3.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

5.4CVSS6.3AI score0.00614EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/03 12:00 a.m.•20 views

Teradek Sphere 跨站脚本漏洞

Teradek Sphere is a real-time monitoring and streaming solution from Teradek. A security vulnerability exists in Teradek Sphere. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

5.4CVSS6.3AI score0.00589EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/02/03 12:00 a.m.•22 views

PT-2023-12313 · Teradek · Bond Pro +2

Name of the Vulnerable Software and Affected Versions: Teradek Bond, Bond 2 and Bond Pro versions 7.3.x and earlier Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. The vendor states that the...

5.4CVSS6.9AI score0.00614EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/02/03 12:00 a.m.•13 views

Teradek Clip 跨站脚本漏洞

Teradek Clip is Teradek's video signal transmitter for drones with encoding and wireless signal transmission. A security vulnerability exists in Teradek Clip. An attacker could use this vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...

5.4CVSS6.3AI score0.00566EPSS
SaveExploits1References2
Rows per page
Query Builder