A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitr

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Ref

CVSS 9.3

Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules al

Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial

CVSS 9.3

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to ob

CVSS 9.3

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attack

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted HTTP request with inje

CVSS 9.2

wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm

wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In ParseECCPubKey() (src/internal.c), the blob's algorith

CVSS 9.0