Archive
30 January 2017
Vulnerabilities first published on this day (UTC), newest first.
57 results · Feed
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin wit…
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.
-
High 7.5
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.
-
Unscored —
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the …
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/…
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.
-
Critical 9.8
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.c…
KEV Mar 25, 2022 -
Unscored —
wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility…
-
Unscored —CVE-2017-5611 EPSS 10%
SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attac…
-
Unscored —
An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" …
-
Unscored —
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay fun…
-
Unscored —
An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setprop…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in …