| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-20082 | 7.5 | ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp. | 2022-01-07 17:18:00 | 2021-12-28 13:15:00 |
| CVE-2021-24997 | 6.4 | The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as usernames and chats between users, as well as be ab | 2022-01-07 17:08:00 | 2021-12-27 11:15:00 |
| CVE-2021-45645 | 7.5 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.122, SRK60 before 2.7.0.122, SRR60 before 2.7.0.122, SRS60 before 2.7.0.122, SXK30 before 3.2.33.108, SXR30 before 3.2.33.108, SXS3 | 2022-01-07 17:02:00 | 2021-12-26 01:15:00 |
| CVE-2021-35032 | 7.2 | A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitrary OS commands via a crafted function call. | 2022-01-07 17:01:00 | 2021-12-28 11:15:00 |
| CVE-2021-35031 | 7.7 | A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow an authenticated LAN user to execute arbitrary OS commands via the GUI of the vulnerable device. | 2022-01-07 16:59:00 | 2021-12-28 11:15:00 |
| CVE-2021-20155 | 7.5 | Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678". | 2022-01-07 16:42:00 | 2021-12-30 22:15:00 |
| CVE-2021-20154 | 4.3 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results in cleartext transmission of sensitive information such as passwords. | 2022-01-07 16:29:00 | 2021-12-30 22:15:00 |
| CVE-2021-20153 | 6.9 | Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality is vulnerable to a symlink attack that could lead to remote code execution on the device. If an end | 2022-01-07 16:27:00 | 2021-12-30 22:15:00 |
| CVE-2021-35243 | 5.0 | The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied | 2022-01-07 16:26:00 | 2021-12-23 20:15:00 |
| CVE-2021-20152 | 5.8 | Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify settings and files via the Bittorent web client by visiting: http://192.168.10.1:9091/transmission/ | 2022-01-07 16:23:00 | 2021-12-30 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: