|
441
|
5.4 |
MEDIUM
Network
|
-
|
-
|
A vulnerability exists in SenseLive
X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requi…
New
|
CWE-613
Insufficient Session Expiration
|
CVE-2026-25720
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
442
|
9.8 |
CRITICAL
Network
|
-
|
-
|
A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service accepts firmware-re…
New
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-25775
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
443
|
8.1 |
HIGH
Network
|
-
|
-
|
A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections. Because the application do…
New
|
CWE-352
Origin Validation Error
|
CVE-2026-27841
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
444
|
9.1 |
CRITICAL
Network
|
-
|
-
|
A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side validation. By apply…
New
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-27843
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
445
|
7.5 |
HIGH
Network
|
-
|
-
|
DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login attempt limits to perform brute-f…
New
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2026-6947
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
446
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.
New
|
CWE-131
Incorrect Calculation of Buffer Size
|
CVE-2026-1949
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
447
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Delta Electronics AS320T has
No checking of the length of the buffer with the file name vulnerability.
New
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-1950
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
448
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Delta Electronics AS320T has no checking of the length of the buffer with the directory name
vulnerability.
New
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-1951
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
449
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.
New
|
CWE-912
Hidden Functionality
|
CVE-2026-1952
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
450
|
7.5 |
HIGH
Network
|
-
|
-
|
Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.
Mitigation can be done by setting max_resul…
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-21728
|
2026-04-24 23:39 |
2026-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|