Lucene search
+L

35 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 2:54 a.m.•14 views

CVE-2023-1763

Canon IJ Network Tool/Ver.4.7.5 and earlier supported OS: OS X 10.9.5-macOS 13,IJ Network Tool/Ver.4.7.3 and earlier supported OS: OS X 10.7.5-OS X 10.8 allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software...

6.5CVSS6.6AI score0.00278EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/11 4:15 p.m.•20 views

CVE-2025-25680

LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...

7.7CVSS6.3AI score0.00583EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/08 12:00 a.m.•15 views

SAMSUNG Smart Things Security Breach

SAMSUNG Smart TV is a series of smart TV products from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Smart TV, which stems from an improperly restricted vulnerability to excessive authentication attempts, allowing an attacker to cause a denial of service via the WPS...

4.3CVSS6.8AI score0.00448EPSS
SaveExploits1References2
OSV
OSV
•added 2023/04/28 9:15 p.m.•15 views

CVE-2023-30405

A cross-site scripting XSS vulnerability in Aigital Wireless-N Repeater MiniRouter v0.131229 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the wlssid parameter at /boafrm/formHomeWlanSetup...

5.4CVSS6.2AI score0.2928EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/10 9:15 p.m.•16 views

CVE-2022-27293

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service DoS via the webpage parameter...

7.5CVSS5.8AI score0.02556EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/03/10 5:47 p.m.•14 views

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

7.4CVSS7.2AI score0.01495EPSS
SaveExploits1References2
OSV
OSV
•added 2022/03/10 5:47 p.m.•22 views

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

7.4CVSS7.2AI score0.01495EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/12/26 12:00 a.m.•15 views

NETGEAR 缓冲区错误漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR that stems from the mishandling of the WPS Wi-Fi Protected Setup protocol by MediaTek microchips...

8.2CVSS7.3AI score0.01118EPSS
SaveExploits0References3
OSV
OSV
•added 2020/09/24 6:15 p.m.•17 views

CVE-2020-3390

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of the Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause the device to unexpectedly reload, causing a denial of...

7.4CVSS5.8AI score0.00639EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2018/12/07 12:00 a.m.•18 views

The vulnerability of the Extensible Authentication Protocol over LAN (EAPOL) implementation in Cisco router microsoftware of the Small Business 100 Series and Small Business 300 Series models allows a hacker to disclose protected information.

The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in Cisco router software of the Small Business 100 Series and Small Business 300 Series models arises due to errors in the EAPOL message processing mechanism during Wi-Fi connection establishment. Exploiting...

5.3CVSS5.8AI score0.00253EPSS
SaveExploits0References4Affected Software3
CNVD
CNVD
•added 2015/09/20 12:00 a.m.•38 views

Phillipine Long Distance Telephone SpeedSurf 504AN and Kasda KW58293 Cross-Site Scripting Vulnerabilities

The Phillipine Long Distance Telephone PLDT SpeedSurf 504AN and the Kasda KW58293 are modem and router all-in-one units. The PLDT SpeedSurf 504AN and Kasda KW58293 form2WlanSetup.cgi page fails to adequately filter the 'ssid' parameter, allowing a remote attacker to exploit the vulnerability by...

4.3CVSS6.8AI score0.0117EPSS
SaveExploits0References1
NVD
NVD
•added 2014/04/25 5:12 p.m.•23 views

CVE-2013-3069

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

3.5CVSS5.5AI score0.01093EPSS
SaveExploits1References2
Prion
Prion
•added 2014/04/25 5:12 p.m.•21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

3.5CVSS5.8AI score0.01093EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2014/04/25 5:00 p.m.•34 views

CVE-2013-3069

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

5.5AI score0.01093EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/25 12:00 a.m.•6 views

CVE-2013-3069: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

3.5CVSS5.8AI score0.01093EPSS
SaveExploits1References2
Rows per page
Query Builder