firmware vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

Innominate mGuard with firmware prior to 7.6.6 and 8.x prior to 8.1.4 allows remote authenticated admins to obtain root privileges by changing a PPP configuration setting.

Innominate Mguard Firmware Innominate Mguard Firmware 8.0.0 Innominate Mguard Firmware 8.0.2 Innominate Mguard Firmware 8.1.1 Innominate Mguard Firmware 8.1.2 Innominate Mguard Firmware 8.1.3 Innominate Mguard Firmware 8.0.1 Innominate Mguard Firmware 8.0.3

5

CVSSv2

Dell EMC iDRAC6, versions before 2.91, iDRAC7/iDRAC8, versions before 2.60.60.60 and iDRAC9, versions before 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote ...

Dell Idrac6 Firmware Dell Idrac9 Firmware Dell Idrac8 Firmware Dell Idrac7 Firmware

10

CVSSv2

Dell EMC iDRAC6 versions before 2.92, iDRAC7/iDRAC8 versions before 2.61.60.60, and iDRAC9 versions before 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulner...

Dell Idrac6 Firmware Dell Idrac7 Firmware Dell Idrac8 Firmware Dell Idrac9 Firmware

5.8

CVSSv2

An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 up to and including 5.4.2 and FortiManager 5.4.0 up to and including 5.4.2 allows malicious user to execute unauthorized code or commands via the next parameter.

Fortinet Fortianalyzer Firmware 5.4.1 Fortinet Fortianalyzer Firmware 5.4.2 Fortinet Fortianalyzer Firmware 5.4.0 Fortinet Fortimanager Firmware 5.4.1 Fortinet Fortimanager Firmware 5.4.2 Fortinet Fortimanager Firmware 5.4.0

6.8

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 prior to 21.270.21.00.00, and E586Bs-2 prior to 21.322.10.00.889 allow remote malicious users to hijac...

Huawei E5180s-22 Firmware Huawei E3276 Firmware Huawei E3236 Firmware Huawei E586bs-2 Firmware

1 EDB exploit

4.3

CVSSv2

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates fe...

Fortinet Fortimanager Firmware 6.0.0 Fortinet Fortianalyzer Firmware Fortinet Fortimanager Firmware Fortinet Fortianalyzer Firmware 6.0.0

9

CVSSv2

The Management Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 prior to 10.1.132.8, 10.5 before Build 56.15, and 10.5.e before Build 56.1505.e allows remote authenticated users to execute arbitrary shell commands via shell metacharac...

Citrix Netscaler Application Delivery Controller Firmware 10.1.123 Citrix Netscaler Application Delivery Controller Firmware 10.1.124 Citrix Netscaler Application Delivery Controller Firmware 10.5e Citrix Netscaler Gateway Firmware 10.1.120.1316.e Citrix Netscaler Application Delivery Controller Firmware 10.1 Citrix Netscaler Application Delivery Controller Firmware 10.1.120.1316.e Citrix Netscaler Application Delivery Controller Firmware 10.1.127 Citrix Netscaler Application Delivery Controller Firmware 10.1.128 Citrix Netscaler Gateway Firmware 10.1.124 Citrix Netscaler Gateway Firmware 10.1.125 Citrix Netscaler Gateway Firmware 10.5.50.10 Citrix Netscaler Gateway Firmware 10.5.51.10 Citrix Netscaler Gateway Firmware 10.1.121 Citrix Netscaler Gateway Firmware 10.1.128 Citrix Netscaler Gateway Firmware 10.1.129 Citrix Netscaler Application Delivery Controller Firmware 10.1.121 Citrix Netscaler Application Delivery Controller Firmware 10.1.122 Citrix Netscaler Application Delivery Controller Firmware 10.1.129 Citrix Netscaler Application Delivery Controller Firmware 10.5 Citrix Netscaler Gateway Firmware 10.1.126 Citrix Netscaler Gateway Firmware 10.1.127 Citrix Netscaler Application Delivery Controller Firmware 10.1.125

5.8

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote malicious users to hijack the authentication...

5

CVSSv2

Directory traversal vulnerability in MayGion IP Cameras with firmware prior to 2013.04.22 (05.53) allows remote malicious users to read arbitrary files via a .. (dot dot) in the default URI.

Maygion Ip Camera Firmware Maygion Ip Camera Firmware 05.49 Maygion Ip Camera Firmware 05.59 Maygion Ip Camera Firmware 05.53 Maygion Ip Camera Firmware 6.2 Maygion Ip Camera Firmware 6.1 Maygion Ip Camera Firmware 6.0 Maygion Ip Camera Firmware 05.60

1 EDB exploit

7.5

CVSSv2

Buffer overflow in MayGion IP Cameras with firmware prior to 2013.04.22 (05.53) allows remote malicious users to execute arbitrary code via a long filename in a GET request.

Maygion Ip Camera Firmware 05.53 Maygion Ip Camera Firmware 05.49 Maygion Ip Camera Firmware 05.60 Maygion Ip Camera Firmware 05.59 Maygion Ip Camera Firmware Maygion Ip Camera Firmware 6.2 Maygion Ip Camera Firmware 6.1 Maygion Ip Camera Firmware 6.0

1 EDB exploit

Get Started

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook