|
209451
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14076
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209452
|
5.9 |
MEDIUM
Network
|
mutt canonical debian opensuse
|
mutt ubuntu_linux debian_linux leap
|
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-14093
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209453
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an authenticated user to…
|
CWE-78
OS Command
|
CVE-2020-14081
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209454
|
9.8 |
CRITICAL
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by POSTing to apply_sec.cgi …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14080
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209455
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14079
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209456
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14078
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209457
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14077
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209458
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), all…
|
CWE-78
OS Command
|
CVE-2020-14075
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209459
|
8.8 |
HIGH
Network
|
trendnet
|
tew-827dru_firmware
|
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via th…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14074
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209460
|
9.8 |
CRITICAL
Network
|
naviwebs
|
navigatecms
|
The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/ext…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-14067
|
2024-11-21 14:02 |
2020-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|