Lucene search
K

216 matches found

OSV
OSV
added 2026/05/26 7:31 p.m.14 views

JLSEC-2026-533

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

5.5CVSS6.7AI score0.00104EPSS
Exploits0References18
OSV
OSV
added 2026/05/26 7:31 p.m.5 views

JLSEC-2026-544

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

8.8CVSS7.1AI score0.04509EPSS
Exploits1References22
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux - уязвимость в openjpeg2

In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could exploit this vulnerability to cause a denial of service by using a crafted BMP file. This issue is similar to CVE-2018-6616...

5.5CVSS6.7AI score0.00104EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/30 12:0 a.m.1 views

CVE-2026-36957

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory...

5.4AI score0.00054EPSS
Exploits2References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 12:0 a.m.3 views

CVE-2026-36956

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

8.8CVSS5.4AI score0.0002EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/04/30 12:0 a.m.5 views

Dbit N300 T1 Pro 跨站请求伪造漏洞

The Dbit N300 T1 Pro is a wireless router device produced by the Dbit company. The Dbit N300 T1 Pro V1.0.0 version has a cross-site request forgeing vulnerability. This vulnerability stems from the lack of cross-site request forgeing protection in the web management interface. It may allow...

8.8CVSS5.7AI score0.0002EPSS
Exploits1References1
CVE
CVE
added 2026/04/30 12:0 a.m.4 views

CVE-2026-36957

The affected device is the Dbit Router, firmware V1.0.0 (Dbit N300 T1 Pro Easy Setup Wireless Wi‑Fi Router). The vulnerability is in the Boa web server URI handler, which can be exploited by sending a high-volume flood of HTTP GET requests to non-existent URIs, causing resource exhaustion (file d...

7.5CVSS5.4AI score0.00054EPSS
Exploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/30 12:0 a.m.2 views

CVE-2026-36956

A Cross-Site Request Forgery CSRF vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An...

5.5AI score0.0002EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/30 12:0 a.m.1 views

EUVD-2026-26378

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory...

7.5CVSS5.4AI score0.00054EPSS
Exploits2References2
CVE
CVE
added 2026/04/30 12:0 a.m.6 views

CVE-2026-36956

The affected component is the web management interface of the Dbit N300 T1 Pro wireless router (V1.0.0). The issue is a CSRF vulnerability due to missing anti-CSRF tokens and insufficient Origin/Referer validation on administrative endpoints such as /api/setWlan. If an authenticated administrator...

8.8CVSS5.5AI score0.0002EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.0 views

PT-2026-36102

Name of the Vulnerable Software and Affected Versions Dbit N300 T1 Pro wireless router version 1.0.0 Description A Cross-Site Request Forgery CSRF issue exists in the web management interface. The device fails to implement proper protection mechanisms, such as anti-CSRF tokens or strict...

8.8CVSS5.8AI score0.0002EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.0 views

PT-2026-30457

An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch 16amp- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface. An attacker with physical access can connect to the UART interface and obtain sensitive information from th...

5.9AI score0.0004EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.2 views

Azure Linux 3.0 Security Update: openjpeg2 (CVE-2020-8112)

The version of openjpeg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-8112 advisory. - opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer...

8.8CVSS8AI score0.04773EPSS
Exploits2References2
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.2 views

Siemens多款产品 资源管理错误漏洞

Siemens SIMATIC ET 200AL and others are products of Siemens, Germany.Siemens SIMATIC ET 200AL is a distributed I/O system module.Siemens SIMATIC ET 200MP is a modular I/O system module for use in control cabinets for high-density channel applications. Siemens SIMATIC ET 200SP is a distributed I/O...

8.7CVSS5.8AI score0.00022EPSS
Exploits0References1
OSV
OSV
added 2025/12/16 4:15 p.m.0 views

CVE-2025-65427

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...

6.5CVSS5.8AI score0.00057EPSS
Exploits1References3
NVD
NVD
added 2025/12/16 4:15 p.m.1 views

CVE-2025-65427

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...

6.5CVSS0.00057EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.1 views

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router 安全漏洞

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router is a wireless router from Dbit China. A security vulnerability exists in the Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version V1, which stems from unimplemented rate limiting and could lead to brute force password cracking...

6.5CVSS6.7AI score0.00057EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/12/16 12:0 a.m.23 views

CVE-2025-65427

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...

0.00057EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/12/16 12:0 a.m.3 views

CVE-2025-65427

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...

6.7AI score0.00057EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-19803

Malware in sbrugna...

4.3CVSS4.9AI score0.00053EPSS
Exploits0References2
Rows per page
Query Builder