Skip to content
OpenAdvisories

Archive

30 January 2017

Vulnerabilities first published on this day (UTC), newest first.

57 results · Feed

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin wit…

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.

  • High 7.5

    An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.

  • Unscored —
    CVE-2016-10176 Public exploit EPSS 77%

    The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the …

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/…

  • Unscored —

    An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.

  • Critical 9.8
    CVE-2016-10174 Exploited Public exploit EPSS 83%

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.c…

    KEV Mar 25, 2022
  • Unscored —

    wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility…

  • Unscored —
    CVE-2017-5611 EPSS 10%

    SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attac…

  • Unscored —

    An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" …

  • Unscored —

    An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay fun…

  • Unscored —

    An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setprop…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in …