Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2019-20489 | Netgear WNR1000V4 1.1.0.54 Web Management Interface setup.cgi cross site scripting


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in Netgear WNR1000V4 1.1.0.54. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file setup.cgi of the component Web Management Interface. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2019-20489. The attack can be launched remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2011-5283 | Smoothwall up to 3.1 Web Management Interface cgi-bin/ipinfo.cgi IP cross site scripting (ID 129698 / EDB-16006)


📈 43.42 Punkte
🕵️ Sicherheitslücken

🕵️ Netgear JNR1010v2/JWNR2010v5/WNR1000v4/WNR2020/WNR2050 authentication


📈 41.31 Punkte
🕵️ Sicherheitslücken

🕵️ Netwin SurgeFTP 23f2 Web Manager Interface cgi/surgeftpmgr.cgi classid/domainid/username Cross Site Scripting


📈 38.23 Punkte
🕵️ Sicherheitslücken

🕵️ Netwin SurgeFTP 23f2 Web Manager Interface cgi/surgeftpmgr.cgi classid/domainid/username cross site scripting


📈 38.23 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-15046 | Supermicro X10DRH-iT 2.0a 03.40 Web Interface cgi/config_user.cgi cross-site request forgery (EDB-48652)


📈 36.17 Punkte
🕵️ Sicherheitslücken

🕵️ Linksys Velop 1.1.2.187020 Web Interface cgi-bin/zbtest.cgi cross site request forgery


📈 35.02 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-5222 | Viessmann Vitogate 300 up to 2.1.3.0 Web Management Interface /cgi-bin/vitogate.cgi isValidUser hard-coded password (EDB-51887)


📈 34.5 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8461 | D-Link DNS-320 2.02b01 Web Management Interface /cgi-bin/discovery.cgi information disclosure (SAP10383)


📈 34.5 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8460 | D-Link DNS-320 2.02b01 Web Management Interface /cgi-bin/widget_api.cgi getHD/getSer/getSys information disclosure (SAP10383)


📈 34.5 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50677 | Netgear DGND4000 1.00.15 /setup.cgi next_file privileges management


📈 33.88 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2004-0672 | Netegrity IdentityMinder Web 5.6/Web 5.6 Sp1/Web 5.6 Sp2 Web Interface numOfExpressions/mobjtype cross site scripting (EDB-24245 / XFDB-16618)


📈 32.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2003-1427 | Netgear FM114P 1.4 Beta Release 17 Web Configuration Interface netgear.cfg port path traversal (EDB-22236 / XFDB-11279)


📈 32.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2011-5284 | Smoothwall up to 3.1 Web Management Interface shutdown.cgi cross-site request forgery (ID 129698 / EDB-16006)


📈 31.13 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-6840 | Huawei OceanStor ISM prior V200R001C04SPC200 Management Interface cgi-bin/doLogin_CgiEntry loginName cross site scripting (sa-20160818-01 / BID-92554)


📈 30.5 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1783 | Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810 Web Interface /cgi-bin/cstecgi.cgi loginAuth http_host stack-based overflow


📈 30.46 Punkte
🕵️ Sicherheitslücken

💾 NETGEAR EXTENDER SETUP USING NETGEAR GENIE APP


📈 29.7 Punkte
💾 IT Security Tools

🕵️ Epson WF-2750 JP02I2 Web Interface AirPrint Setup HTML Injection cross site scripting


📈 29.58 Punkte
🕵️ Sicherheitslücken

🕵️ ControlByWeb X-320M-I 1.05 Web Interface setup.html cross site scripting


📈 29.58 Punkte
🕵️ Sicherheitslücken

🕵️ Huawei OceanStor ISM vor V200R001C04SPC200 Management Interface cgi-bin/doLogin_CgiEntry loginName Cross Site Scripting


📈 29.36 Punkte
🕵️ Sicherheitslücken

🕵️ Huawei OceanStor ISM vor V200R001C04SPC200 Management Interface cgi-bin/doLogin_CgiEntry loginName Cross Site Scripting


📈 29.36 Punkte
🕵️ Sicherheitslücken

🕵️ Barracuda Web Filter 5.0.0.012 Admin Interface /cgi-mod/index.cgi privilege escalation


📈 29.31 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-20836 | Cisco FirePOWER Management Center Web-based Management Interface data cross site scripting (cisco-sa-fmc-xss-LATZYzxs)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-20843 | Cisco FirePOWER Management Center Web-based Management Interface cross site scripting (cisco-sa-fmc-xss-LATZYzxs)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-20074 | Cisco Firepower Management Center up to 7.3.1.1 Web-based Management Interface cross site scripting (cisco-sa-fmc-xss-sK2gkfvJ)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-20041 | Cisco Firepower Management Center up to 7.2.3.1 Web-based Management Interface cross site scripting (cisco-sa-fmc-xss-sK2gkfvJ)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-20249 | Cisco TelePresence Management Suite Web-based Management Interface cross site scripting (cisco-sa-tms-portal-xss-AXNeVg3s)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-3185 | Cisco TelePresence Management Suite Web-based Management Interface cross site scripting (cisco-sa-tms-xss-4VXKdLO)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20334 | Cisco TelePresence Management Suite Web-based Management Interface cross site scripting (cisco-sa-tms-xss-kGw4DX9Y)


📈 29.3 Punkte
🕵️ Sicherheitslücken

🕵️ D-Link DSL-3782 1.01 Web Interface /cgi-bin/New_GUI/Acl.asp cross site scripting


📈 29.15 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-49965 | SpaceX Starlink Wi-Fi Router Gen 2 prior 2023.48.0 on Setup Setup Page ssid/password cross site scripting


📈 29.08 Punkte
🕵️ Sicherheitslücken

💾 Netgear DGN1000 Setup.cgi Remote Command Execution


📈 28.69 Punkte
💾 IT Security Tools

⚠️ Netgear DGN1000 Setup.cgi Remote Command Execution


📈 28.69 Punkte
⚠️ PoC

⚠️ [remote] Netgear DGN1000 1.1.00.48 - Setup.cgi Unauthenticated Remote Code Execution (Metasploit)


📈 28.69 Punkte
⚠️ PoC

🕵️ Netgear GC108P setup.cgi User-Agent os command injection


📈 28.69 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36444 | Swissphone DiCal-RED 2.cgi Log cgi-bin/fdmcgiwebv2.cgi information disclosure (SYSS-2024-040)


📈 28.39 Punkte
🕵️ Sicherheitslücken

matomo
•