Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
a1 vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-46476
D-Link DIR-859 A1 1.05 exists to contain a command injection vulnerability via the service= variable in the soapcgi_main function.
Dlink Dir-859 A1 Firmware 1.05
NA
CVE-2010-1104
Cross-site scripting (XSS) vulnerability in Zope 2.8.x prior to 2.8.12, 2.9.x prior to 2.9.12, 2.10.x prior to 2.10.11, 2.11.x prior to 2.11.6, and 2.12.x prior to 2.12.3 allows remote malicious users to inject arbitrary web script or HTML via vectors related to error messages.
Zope Zope 2.8.0-final
Zope Zope 2.8.1
Zope Zope 2.8.1-b1
Zope Zope 2.8.6
Zope Zope 2.8.0-b1
Zope Zope 2.8.0-b2
Zope Zope 2.8.4
Zope Zope 2.8.5
Zope Zope 2.9.0
Zope Zope 2.9.0-b1
Zope Zope 2.9.5
Zope Zope 2.9.6
Zope Zope 2.10.2-b1
Zope Zope 2.10.0-final
Zope Zope 2.10.4-final
Zope Zope 2.10.3
Zope Zope 2.11.2
Zope Zope 2.11.3
Zope Zope 2.11.0a1
Zope Zope 2.12.2
Zope Zope 2.8
Zope Zope 2.8.0
6.7
CVSSv3
CVE-2018-13787
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware.
Supermicro X11ssz Firmware -
Supermicro X11ssv Firmware -
Supermicro X11ssql Firmware -
Supermicro X11ssq Firmware -
Supermicro X11ssn Firmware -
Supermicro X11srm Firmware -
Supermicro X11sra Firmware -
Supermicro X11sba Firmware -
Supermicro X11sat Firmware -
Supermicro X11sae M Firmware -
Supermicro X11sae Firmware -
Supermicro X10srw Firmware -
Supermicro X10srm Firmware -
Supermicro X10srl Firmware -
Supermicro X10sri Firmware -
Supermicro X10srh Firmware -
Supermicro X10srg Firmware -
Supermicro X10srd Firmware -
Supermicro X10sra Firmware -
Supermicro X10sdvt Firmware -
Supermicro X10sdvf Firmware -
Supermicro X10sde Firmware -
NA
CVE-2014-6433
gpExec in GoPro HERO 3+ allows remote malicious users to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action.
Gopro Gopro Hero Firmware 3\\+
Gopro Gopro Hero 3\\+
NA
CVE-2014-6434
gpExec in GoPro HERO 3+ allows remote malicious users to execute arbitrary commands via a the (1) a1 or (2) a2 parameter in a restart action.
Gopro Gopro Hero Firmware 3\\+
Gopro Gopro Hero 3\\+
NA
CVE-2009-3012
Mozilla Firefox 3.0.13 and previous versions, 3.5, 3.6 a1 pre, and 3.7 a1 pre does not properly block data: URIs in Location headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Locatio...
Mozilla Firefox 3.0.10
Mozilla Firefox 3.0.6
Mozilla Firefox 3.0.4
Mozilla Firefox 3.0
Mozilla Firefox 3.0.1
Mozilla Firefox 3.0.11
Mozilla Firefox 3.0.9
Mozilla Firefox 3.5
Mozilla Firefox 3.7
Mozilla Firefox 3.0.12
Mozilla Firefox 3.0.2
Mozilla Firefox 3.0.7
Mozilla Firefox 3.0.8
Mozilla Firefox 3.0.3
Mozilla Firefox 3.0.5
Mozilla Firefox
Mozilla Firefox 3.6
NA
CVE-2001-0285
Buffer overflow in A1 HTTP server 1.0a allows remote malicious users to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
A1webserver Http Server 1.0
7.8
CVSSv3
CVE-2022-37345
Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access.
Intel Nuc Kit Nuc5i3ryh Firmware
Intel Nuc Kit Nuc5i7ryh Firmware
Intel Nuc Kit Nuc5i5ryk Firmware
Intel Nuc Kit Nuc5i5ryh Firmware
Intel Nuc Kit Nuc5i3ryk Firmware
Intel Nuc Kit Nuc5i5ryhs Firmware
Intel Nuc Kit Nuc5i3ryhs Firmware
Intel Nuc Kit Nuc5i3ryhsn Firmware
7.5
CVSSv3
CVE-2018-14080
An issue exists on D-Link DIR-809 A1 up to and including 1.09, A2 up to and including 1.11, and Guest Zone up to and including 1.09 devices. One can bypass authentication mechanisms to download the configuration file.
D-link Dir-809 A1 Firmware
D-link Dir-809 A2 Firmware
D-link Dir-809 Guestzone Firmware
NA
CVE-2009-3010
Mozilla Firefox 3.0.13 and previous versions, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozilla 1.7.x and previous versions do not properly block data: URIs in Refresh headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS...
Mozilla Seamonkey 1.1.17
Mozilla Firefox 3.5
Mozilla Firefox
Mozilla Mozilla
Mozilla Firefox 3.7
Mozilla Firefox 3.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »