|
197511
|
6.1 |
MEDIUM
Adjacent
|
dlink
|
dir-2640-us_firmware
|
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of t…
|
CWE-22
Path Traversal
|
CVE-2021-20133
|
2024-11-21 14:45 |
2021-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197512
|
7.5 |
HIGH
Network
|
sonicwall
|
sma_100_firmware sma_200_firmware sma_210_firmware sma_400_firmware sma_410_firmware sma_500v_firmware
|
An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login, potentially exposing configuration meta-data.
|
NVD-CWE-Other
|
CVE-2021-20050
|
2024-11-21 14:45 |
2021-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197513
|
7.5 |
HIGH
Network
|
sonicwall
|
sma_100_firmware sma_200_firmware sma_210_firmware sma_400_firmware sma_410_firmware sma_500v_firmware
|
A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 username enumeration based on the server responses. This vulnerability impacts 10.2.…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2021-20049
|
2024-11-21 14:45 |
2021-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197514
|
8.8 |
HIGH
Adjacent
|
gryphonconnect
|
gryphon_tower_firmware
|
An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same ne…
|
CWE-78
OS Command
|
CVE-2021-20139
|
2024-11-21 14:45 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197515
|
8.8 |
HIGH
Adjacent
|
gryphonconnect
|
gryphon_tower_firmware
|
An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same networ…
|
CWE-78
OS Command
|
CVE-2021-20138
|
2024-11-21 14:45 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197516
|
6.1 |
MEDIUM
Network
|
gryphonconnect
|
gryphon_tower_firmware
|
A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by …
|
CWE-79
Cross-site Scripting
|
CVE-2021-20137
|
2024-11-21 14:45 |
2021-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197517
|
7.8 |
HIGH
Local
|
sonicwall
|
global_vpn_client
|
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code ex…
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2021-20047
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197518
|
9.8 |
CRITICAL
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This…
|
CWE-120
Classic Buffer Overflow
|
CVE-2021-20045
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197519
|
8.8 |
HIGH
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system commands in the appliance. This vulnerability affected SMA…
|
CWE-78
OS Command
|
CVE-2021-20044
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197520
|
8.8 |
HIGH
Network
|
sonicwall
|
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware
|
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnera…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-20043
|
2024-11-21 14:45 |
2021-12-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|