CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

443 matches found

NVD•added 2024/09/03 2:15 a.m.•21 views

CVE-2024-42058

A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V5.20 through V5.38, and USG20W-VPN series firmware versions from V5.20 through V5.38 cou...

7.5CVSS0.00621EPSS

SaveExploits0References1

NVD•added 2024/09/03 2:15 a.m.•34 views

CVE-2024-42057

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16...

8.1CVSS0.0132EPSS

SaveExploits0References1

NVD•added 2024/09/03 2:15 a.m.•31 views

CVE-2024-42060

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS0.01339EPSS

SaveExploits0References1

NVD•added 2024/09/03 2:15 a.m.•33 views

CVE-2024-42059

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50W series firmware versions from V5.00 through V5.38, and USG20W-VPN series firmware versions from V5.00...

7.2CVSS0.01339EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 2:10 a.m.•46 views

CVE-2024-7261

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70ABVT.4 and earlier, WAC500 firmware version 6.70ABVS.4 and earlier, WAX655E firmware version 7.00ACDO.1 and earlier, WBE530 firmware version 7.00ACLE.1 and earlier,...

9.8CVSS0.11408EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:59 a.m.•68 views

CVE-2024-42061

CVE-2024-42061 is a documented reflected cross-site scripting (XSS) vulnerability in Zyxel devices. The CGI program \

6.1CVSS5.2AI score0.00295EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/09/03 1:59 a.m.•43 views

CVE-2024-42061

A reflected cross-site scripting XSS vulnerability in the CGI program "dynamicscript.cgi" of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN seri...

6.1CVSS0.00295EPSS

SaveExploits0References1

Vulnrichment•added 2024/09/03 1:59 a.m.•17 views

CVE-2024-42061

6.1CVSS5.2AI score0.00295EPSS

SaveExploits0References1

Vulnrichment•added 2024/09/03 1:54 a.m.•15 views

CVE-2024-42060

7.2CVSS7.6AI score0.01339EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 1:54 a.m.•35 views

CVE-2024-42060

7.2CVSS0.01339EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:54 a.m.•67 views

CVE-2024-42060

CVE-2024-42060 is a post-authentication command-injection vulnerability in Zyxel devices, affecting firmware ranges: ATP v4.32–5.38 , USG FLEX v4.50–5.38 , USG FLEX 50(W) v4.16–5.38 , and USG20(W)-VPN v4.16–5.38 . An authenticated administrator can upload a crafted internal user agreement file to...

7.2CVSS7.7AI score0.01339EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2024/09/03 1:51 a.m.•27 views

CVE-2024-42059

7.2CVSS7.6AI score0.01339EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:51 a.m.•63 views

CVE-2024-42059

CVE-2024-42059 affects Zyxel devices including ATP series firmware V5.00–V5.38, USG FLEX series V5.00–V5.38, USG FLEX 50(W) V5.00–V5.38, and USG20(W)-VPN V5.00–V5.38. The issue is a post-authentication command-injection vulnerability in the FTP handling that allows an authenticated administrator ...

7.2CVSS7.7AI score0.01339EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/09/03 1:51 a.m.•29 views

CVE-2024-42059

7.2CVSS0.01339EPSS

SaveExploits0References1

Vulnrichment•added 2024/09/03 1:47 a.m.•16 views

CVE-2024-42058

7.5CVSS7AI score0.00621EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 1:47 a.m.•25 views

CVE-2024-42058

7.5CVSS0.00621EPSS

SaveExploits0References1

CVE•added 2024/09/03 1:47 a.m.•59 views

CVE-2024-42058

CVE-2024-42058 is a null pointer dereference vulnerability in Zyxel devices: Zyxel ATP firmware v4.32–v5.38, USG FLEX v4.50–v5.38, USG FLEX 50(W) v5.20–v5.38, and USG20(W)-VPN v5.20–v5.38. It allows an unauthenticated attacker to cause DoS by sending crafted packets, with network attack vector an...

7.5CVSS7.1AI score0.00621EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/09/03 1:43 a.m.•29 views

CVE-2024-42057

8.1CVSS0.0132EPSS

SaveExploits0References1

Cvelist•added 2024/09/03 1:36 a.m.•27 views

CVE-2024-7203

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system OS commands on a...

7.2CVSS0.01339EPSS

SaveExploits0References1

Vulnrichment•added 2024/09/03 1:36 a.m.•15 views

CVE-2024-7203

7.2CVSS7.6AI score0.01339EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by