Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nec vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv3
CVE-2018-0634
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter or bootmode parameter of a certain URL.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0635
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via filename parameter.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0636
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via FactoryPassword parameter of a certain URL, different URL from CVE-2018-0634.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0638
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via import.cgi encKey parameter.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0639
Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary OS commands via tools_firmware.cgi date parameter, time parameter, and offset parameter.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0640
Buffer overflow in Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary code via netWizard.cgi date parameter, time parameter, and offset parameter.
Nec Aterm Hc100rc Firmware
7.2
CVSSv3
CVE-2018-0641
Buffer overflow in Aterm HC100RC Ver1.0.1 and previous versions allows attacker with administrator rights to execute arbitrary code via tools_system.cgi date parameter, time parameter, and offset parameter.
Nec Aterm Hc100rc Firmware
NA
CVE-2008-0378
Stack-based buffer overflow in SocksCap 2.40-051231 and previous versions, when "Resolve all names remotely" is enabled, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long hostname.
Nec Sockscap
7.5
CVSSv3
CVE-2019-20026
The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote malicious users to reset all existing usernames and passwords to default values via a crafted request.
Nec Sv9100 Firmware
9.8
CVSSv3
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface.
Nec Sv8100 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248
CVE-2024-3110
CVE-2024-5552
CVE-2024-29415
HTML injection
CVE-2024-3095
TCP
type confusion
CVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »