Lucene search
+L

4089 matches found

CNNVD
CNNVD
added 2024/03/15 12:00 a.m.10 views

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users, supporting 2.4GHz and 5GHz dual-band, with a maximum transmission rate of 1900Mbps. Tenda AC18 suffers from a stack buffer overflow vulnerability that...

9CVSS7.5AI score0.01684EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2024/03/14 12:00 a.m.24 views

Citrix SD-WAN 11.4.x < 11.4.4.46 (CTX617071)

The version of Citrix SD-WAN installed on the remote host is prior to 11.4.4.46. It is, therefore, affected by a vulnerability as referenced in the CTX617071 advisory. - Server-Side Request Forgery SSRF in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an...

6.5CVSS6.5AI score0.00368EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/12 1:15 p.m.14 views

CVE-2024-2049

Server-Side Request Forgery SSRF in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP...

5.3CVSS5.8AI score0.00368EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/12 1:15 p.m.20 views

CVE-2024-2049

Server-Side Request Forgery SSRF in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP...

6.5CVSS6.3AI score0.00368EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/12 1:15 p.m.28 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP...

6.4CVSS7AI score0.00368EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/12 12:39 p.m.22 views

CVE-2024-2049 Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP...

6.5CVSS6.3AI score0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/12 12:39 p.m.31 views

CVE-2024-2049 Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP...

6.5CVSS6.5AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/12 12:39 p.m.87 views

CVE-2024-2049

Summary: CVE-2024-2049 is a SSRF vulnerability in Citrix SD-WAN Standard/Premium Editions (11.4.0–11.4.4.46). The issue allows an attacker to disclose limited information from the appliance via access to the management IP. Affected products/versions: Citrix SD-WAN Standard/Premium Editions on or ...

6.5CVSS6.3AI score0.00368EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2024/03/12 12:08 p.m.63 views

Citrix SDWAN Security Bulletin for CVE-2024-2049

A vulnerability has been identified that impacts Citrix SD-WAN Affected Versions: The vulnerability affects the following supported versions of Citrix SD-WAN SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 Summary: SDWAN contains the vulnerability mentioned below...

6.5CVSS7.1AI score0.00368EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/03/12 12:00 a.m.12 views

Citrix SD-WAN Code Issue Vulnerability

Citrix Systems Citrix SD-WAN is a networking product from Citrix Systems, Inc. It virtualizes and optimizes enterprise site-to-site networks. A code issue vulnerability exists in Citrix SD-WAN versions 11.4.0 through 11.4.4.46, which originated from a code issue that allows an attacker to disclos...

6.5CVSS6.6AI score0.00368EPSS
SaveExploits0References3
HPE Security Bulletins
HPE Security Bulletins
added 2024/03/05 12:00 a.m.18 views

HPESBNW04604 rev.2 - HPE Aruba ArubaOS, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary File Deletion; Remote: Arbitrary Code Execution, Denial of Service DoS, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba SD-WAN Software and Gateways See vulnerability summary for details Aruba...

9.1CVSS6.2AI score0.0124EPSS
SaveExploits0
NVD
NVD
added 2024/02/17 4:15 a.m.21 views

CVE-2023-31728

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface...

7CVSS6.8AI score0.00203EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/17 4:15 a.m.19 views

Design/Logic Flaw

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface...

7.4AI score0.00203EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/17 12:00 a.m.16 views

CVE-2023-31728

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface...

7.3AI score0.00203EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/17 12:00 a.m.24 views

CVE-2023-31728

Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface...

7AI score0.00203EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/17 12:00 a.m.93 views

CVE-2023-31728

The CVE-2023-31728 affects Teltonika RUT240 devices with firmware before 07.04.2. When bridge mode is used, SSH and HTTP services may be exposed on the IPv6 WAN interface even though the UI shows access limited to LAN. Root cause involves access control/interface exposure in the bridge configurat...

7CVSS7AI score0.00203EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/16 12:00 a.m.12 views

PT-2024-4031 · Teltonika · Teltonika Rut240

Name of the Vulnerable Software and Affected Versions: Teltonika RUT240 versions prior to 07.04.2 Description: The issue is related to incorrect access control in the firmware of Teltonika RUT240 devices. When bridge mode is used, SSH and HTTP services may be made available on the IPv6 WAN...

9.4CVSS6.8AI score0.00203EPSS
SaveExploits0References11
Packet Storm
Packet Storm
added 2024/01/31 12:00 a.m.249 views

TELSAT marKoni FM Transmitter 1.9.5 Root Command Injection

!/usr/bin/env python TELSAT marKoni FM Transmitter 1.9.5 Root Command Injection PoC Exploit Vendor: TELSAT Srl Product web page: https://www.markoni.it Affected version: Markoni-D Compact FM Transmitters Markoni-DH Exciter+Amplifiers FM Transmitters Markoni-A Analogue Modulator FM Transmitters...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/01/22 12:00 a.m.11 views

The vulnerability of the setWanCfg function in the Totolink LR1200GB router’s microprogramming software, which exists due to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary code.

The vulnerability of the setWanCfg function in the Totolink LR1200GB router microprogramming system exists due to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.03834EPSS
SaveExploits1References4Affected Software1
GithubExploit
GithubExploit
added 2024/01/13 12:17 a.m.90 views

Exploit for Path Traversal in Cisco Sd-Wan_Vbond_Orchestrator

CVE-2022-20818: Local Privilege Escalation via Partial File Re...

7.8CVSS7.9AI score0.00595EPSS
SaveExploits1
Rows per page
Query Builder