https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 08:12:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05726 bdu:2021-05726 https://cve.radiocsirt.org/vuln/bdu:2021-05726 https://cve.radiocsirt.org/vuln/cnvd-2021-67523 cnvd-2021-67523 https://cve.radiocsirt.org/vuln/cnvd-2021-67523 https://cve.radiocsirt.org/vuln/euvd-2026-28907 EUVD-2026-28907 https://cve.radiocsirt.org/vuln/euvd-2026-28907 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34862 <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoint. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13270.</p> <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoint. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13270.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-34862 https://cve.radiocsirt.org/vuln/ghsa-p2jj-p9xc-7g6j <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoint. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13270.</p> <p>This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoint. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13270.</p> https://cve.radiocsirt.org/vuln/ghsa-p2jj-p9xc-7g6j https://cve.radiocsirt.org/vuln/gsd-2021-34862 gsd-2021-34862 https://cve.radiocsirt.org/vuln/gsd-2021-34862