Lucene search
+L

7 matches found

Broadcom
Broadcom
•added 2026/10/06 12:00 a.m.•9 views

Authenticated Privilege Escalation via Command Injection in Timezone Configuration Processing

: An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...

8.6CVSS6.5AI score0.01847EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/08/22 11:00 a.m.•56 views

CVE-2026-77946 TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

10CVSS0.0102EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/22 11:00 a.m.•129 views

CVE-2026-77946

A stack-based buffer overflow in the NTP Timezone Configuration Handler of TRENDnet TEW-821DAP firmware 2.2.01b05 allows remote, unauthenticated attackers to achieve full system compromise (CVSS 10.0 CRITICAL). The vulnerable function is uci_safe_get in /cgi-bin/apply_time.cgi ; manipulating the ...

10CVSS8.5AI score0.0102EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/22 12:00 a.m.•35 views

PT-2026-79529

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A stack-based buffer overflow exists in the NTP Timezone Configuration Handler within the uci safe get function of the /cgi-bin/apply time.cgi endpoint. This issue occurs because the function...

10CVSS9.6AI score0.0102EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-40571

Malicious code in bioql PyPI...

7.7CVSS4.4AI score0.0059EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/02 12:00 a.m.•15 views

PT-2023-25641 · Pure Storage · Flashblade Purity

Name of the Vulnerable Software and Affected Versions: FlashBlade Purity affected versions not specified Description: A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can...

7.7CVSS3.4AI score0.0059EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/25 12:00 a.m.•7 views

CVE-2018-20053: Undefined Security Weakness

An issue was discovered on Cerner Connectivity Engine CCE 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network...

9.8CVSS5.8AI score0.02203EPSS
SaveExploits0References1
Rows per page
Query Builder