Lucene search

K

SolarView Compact Security Vulnerabilities

cve
cve

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php...

9.8CVSS

9.6AI Score

0.001EPSS

2023-10-27 09:15 PM
23
cve
cve

CVE-2023-40924

SolarView Compact < 6.00 is vulnerable to Directory...

7.5CVSS

7.4AI Score

0.001EPSS

2023-09-08 01:15 PM
31
cve
cve

CVE-2023-27512

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and perform an unintended...

7.2CVSS

6.8AI Score

0.003EPSS

2023-05-23 02:15 AM
20
cve
cve

CVE-2023-27920

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected...

4.3CVSS

4.4AI Score

0.002EPSS

2023-05-23 02:15 AM
22
cve
cve

CVE-2023-27521

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS...

8.8CVSS

8.6AI Score

0.004EPSS

2023-05-23 02:15 AM
20
cve
cve

CVE-2023-27514

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS...

8.8CVSS

8.6AI Score

0.004EPSS

2023-05-23 02:15 AM
25
cve
cve

CVE-2023-27518

Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute arbitrary...

8.8CVSS

8.7AI Score

0.003EPSS

2023-05-23 02:15 AM
20
cve
cve

CVE-2023-29919

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not...

9.1CVSS

9AI Score

0.479EPSS

2023-05-23 01:15 AM
25
cve
cve

CVE-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through...

9.8CVSS

9.7AI Score

0.963EPSS

2023-02-06 10:15 PM
74
cve
cve

CVE-2022-44354

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php...

9.8CVSS

9.1AI Score

0.003EPSS

2022-11-29 05:15 PM
27
2
cve
cve

CVE-2022-44355

SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via...

6.1CVSS

6AI Score

0.001EPSS

2022-11-29 05:15 PM
24
cve
cve

CVE-2022-40881

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via...

9.8CVSS

9.8AI Score

0.961EPSS

2022-11-17 04:15 AM
39
8
cve
cve

CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...

8.8CVSS

8.5AI Score

0.005EPSS

2022-08-16 08:15 AM
36
cve
cve

CVE-2021-20661

Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified...

8.1CVSS

7.8AI Score

0.001EPSS

2021-02-24 12:15 PM
21
2
cve
cve

CVE-2021-20662

Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified...

7.5CVSS

7.9AI Score

0.001EPSS

2021-02-24 12:15 PM
30
2
cve
cve

CVE-2021-20660

Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified...

6.1CVSS

6.2AI Score

0.001EPSS

2021-02-24 12:15 PM
21
2
cve
cve

CVE-2021-20659

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary...

8.8CVSS

8.7AI Score

0.004EPSS

2021-02-24 12:15 PM
29
cve
cve

CVE-2021-20657

Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting information without the access privilege via unspecified...

5.4CVSS

5.4AI Score

0.001EPSS

2021-02-24 12:15 PM
20
4
cve
cve

CVE-2021-20656

Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecified...

4.3CVSS

4.5AI Score

0.001EPSS

2021-02-24 12:15 PM
30
4
cve
cve

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified...

9.8CVSS

9.6AI Score

0.004EPSS

2021-02-24 12:15 PM
29
2