Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 8,45 % · rekomendacja wg zapisanej polityki
OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 7,35 % · rekomendacja wg zapisanej polityki
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 6,79 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 5,85 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has been…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 5,72 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be…
Opis źródłowy NVD · ENCVSS 8,9 · EPSS 5,63 % · rekomendacja wg zapisanej polityki
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 6,08 % · rekomendacja wg zapisanej polityki
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 7,05 % · rekomendacja wg zapisanej polityki
pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 6,37 % · rekomendacja wg zapisanej polityki
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 4,71 % · rekomendacja wg zapisanej polityki
Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root commands by tampering with the limiter number field. Attackers can submit a malicious hidden 'number' value when editing a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 8,45 % · rekomendacja wg zapisanej polityki
OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown is in use
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 7,35 % · rekomendacja wg zapisanej polityki
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 6,79 % · rekomendacja wg zapisanej polityki
A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/http_eshell_server of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,9 · EPSS 5,85 % · rekomendacja wg zapisanej polityki
A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has been…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,9 · EPSS 5,72 % · rekomendacja wg zapisanej polityki
A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,9 · EPSS 5,63 % · rekomendacja wg zapisanej polityki
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 6,08 % · rekomendacja wg zapisanej polityki
Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 7,05 % · rekomendacja wg zapisanej polityki
pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 6,37 % · rekomendacja wg zapisanej polityki
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 8,8 · EPSS 4,71 % · rekomendacja wg zapisanej polityki