Search vulnerabilities

Results 5,621

Export CSV
CVE-2013-4863

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag.

CVSS 3.1 · 8.8 High EPSS 12.2% KEV · Not listed
Vendors
CVE-2013-3367

Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2013-3316

Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg".

CVSS 3.1 · 9.8 Critical EPSS 4.8% KEV · Not listed
Vendors
CVE-2013-3215

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.

CVSS 3.1 · 9.8 Critical EPSS 68.8% KEV · Not listed
Vendors
Products
CVE-2013-3091

An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript debugging."

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Products
CVE-2013-3088

Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2013-3072

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors