Lucene search
+L

191 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•10 views

CVE-2023-32139: Stack-based Buffer Overflow

D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...

8.8CVSS6.8AI score0.01038EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•11 views

CVE-2023-32146: Stack-based Buffer Overflow

D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. T...

8.8CVSS6.7AI score0.01101EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•4 views

CVE-2023-32142: Stack-based Buffer Overflow

D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The...

8.8CVSS6.7AI score0.01101EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•13 views

CVE-2023-32140: Heap-based Buffer Overflow

D-Link DAP-1360 webproc var:sysToken Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. T...

7.5CVSS6.6AI score0.00913EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/03 12:00 a.m.•5 views

CVE-2023-32138: Heap-based Buffer Overflow

D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...

8.8CVSS6.7AI score0.00931EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/03 12:00 a.m.•20 views

D-Link DAP-1360 security vulnerability

The D-Link DAP-1360 is a router from China AUO D-Link. A security vulnerability exists in the D-Link DAP-1360 that stems from a webproc WEBDisplayPage directory traversal information disclosure vulnerability...

6.5CVSS5AI score0.01167EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/05/22 12:00 a.m.•15 views

D-Link webproc script Code Execution

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01038EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/22 12:00 a.m.•20 views

D-Link webproc script Code Execution

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS8AI score0.00931EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/22 12:00 a.m.•27 views

D-Link webproc script Code Execution

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01101EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/05 12:00 a.m.•19 views

D-Link DAP-2020 Wireless Access Point Request Handler Code Execution

The vulnerability of the request processor/cgi-bin/webproc in wireless access points from D-Link, models DAP-2020 and DAP-1360, relates to the possibility of buffer overflow based on a stack mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

8.8CVSS8.3AI score0.01155EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•38 views

D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. When parsing t...

8.8CVSS7.4AI score0.01155EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•40 views

D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue...

8.8CVSS7.3AI score0.01038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/05/04 12:00 a.m.•53 views

D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /cgi-bin/webproc endpoint. When parsing the errorpage and nextpage...

8.8CVSS7.4AI score0.01101EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/04/16 2:15 a.m.•10 views

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

7.5CVSS5.8AI score0.07516EPSS
SaveExploits5References3
Cvelist
Cvelist
•added 2023/04/16 12:00 a.m.•65 views

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

7.6AI score0.07516EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/16 12:00 a.m.•6 views

CVE-2022-40946: Uncontrolled Resource Consumption

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

7.5CVSS5.8AI score0.07516EPSS
SaveExploits5References2
BDU FSTEC
BDU FSTEC
•added 2023/02/06 12:00 a.m.•21 views

D-Link DAP-2020 Code Execution

The vulnerability of the microprogrammed software of D-Link’s DAP-2020 and DAP-1360 wireless access points is related to buffer overflow during the processing of the var:menu parameter at the webproc end point. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.8CVSS6.4AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/02/06 12:00 a.m.•25 views

D-Link Wireless Access Point Buffer Overflow

The vulnerability of the microprogrammed software of D-Link’s DAP-2020 and DAP-1360 wireless access points is related to buffer overflow when processing the var:page parameter of the webproc module. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.8CVSS6.3AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/02/06 12:00 a.m.•19 views

D-Link Wireless Access Point Code Execution

The vulnerability of the COMMMakeCustomMsg function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflows during the processing of the webproc endpoint. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.8CVSS8.2AI score0.01038EPSS
SaveExploits0References3Affected Software2
osv_cve
osv_cve
•added 2023/01/26 9:15 p.m.•19 views

CVE-2020-18331

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

9.1CVSS5.8AI score0.01303EPSS
SaveExploits1References2
Rows per page
Query Builder