|
248021
|
9.8 |
CRITICAL
Network
|
twsz
|
wifi_repeater_firmware
|
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root"). The attacker can make a user that is…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-8771
|
2024-11-21 12:34 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248022
|
7.5 |
HIGH
Network
|
twsz
|
wifi_repeater_firmware
|
There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.
|
CWE-200
Information Exposure
|
CVE-2017-8770
|
2024-11-21 12:34 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248023
|
6.1 |
MEDIUM
Network
|
microsoft
|
exchange_server
|
Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Cross-Sit…
|
CWE-79
Cross-site Scripting
|
CVE-2017-8758
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248024
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way Microsoft Edge h…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-8757
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248025
|
4.2 |
MEDIUM
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edg…
|
CWE-20
Improper Input Validation
|
CVE-2017-8754
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248026
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft E…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-8756
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248027
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting eng…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-8755
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248028
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microso…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-8753
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248029
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edg…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-8752
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248030
|
7.5 |
HIGH
Network
|
microsoft
|
edge
|
Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-8751
|
2024-11-21 12:34 |
2017-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|