Lucene search
K

19 matches found

OSV
OSV
added 3 days ago2 views

ROOT-OS-UBUNTU-2404-CVE-2026-23113 CVE-2026-23113 in rootio-linux - Patched by Root

Root has patched CVE-2026-23113 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.5CVSS5.9AI score0.00115EPSS
Exploits0
Circl
Circl
added 2026/03/19 12:0 a.m.3 views

CVE-2026-23113

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-06-01 18:00:00+00:00| seen|...

5.5CVSS5.8AI score0.00115EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2025/07/02 7:33 a.m.145 views

Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy

CVE-2024-23113 FortiOS Test Environment A Docker-based test e...

9.8CVSS10AI score0.61725EPSS
Exploits8
RedhatCVE
RedhatCVE
added 2025/05/22 9:58 p.m.6 views

CVE-2022-23113

Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files...

4.3CVSS6.5AI score0.01504EPSS
Exploits0References1
CVE
CVE
added 2025/05/22 12:48 a.m.44 views

CVE-2025-3881

The CVE-2025-3881 entry concerns the eCharge Hardy Barth cPH2 charging stations. A vulnerability in the ntp parameter handling of the /check_req.php endpoint allows command injection, due to insufficient validation of a user-supplied string used in a system call. This can enable remote code execu...

8.8CVSS9.1AI score0.00789EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/01/10 10:15 p.m.19 views

CVE-2025-23113

An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file containing a list of alert configuration. An attacker can send the victim a CSV file containing an HTML injection payload in the alert-title. Once...

8.8CVSS0.00156EPSS
Exploits0References1
Circl
Circl
added 2025/01/10 10:4 p.m.11 views

CVE-2025-23113

creationtimestamp| type| source ---|---|--- 2025-01-10 22:04:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1249 2025-01-10 22:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113806369662260579 2025-01-10 22:16:30+00:00| seen|...

8.8CVSS4.8AI score0.00156EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2024/11/28 6:30 a.m.481 views

Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy

CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discover...

9.8CVSS8.1AI score0.61725EPSS
Exploits8
GithubExploit
GithubExploit
added 2024/10/21 10:27 a.m.580 views

Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy

CVE-2024-23113 The script is designed to detect CVE-2024-2311...

9.8CVSS9.9AI score0.61725EPSS
Exploits8
The Hacker News
The Hacker News
added 2024/10/10 5:44 a.m.74 views

CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical security flaw impacting Fortinet products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-23113 CVSS score: 9.8, relates ...

9.9CVSS10AI score0.99588EPSS
Exploits17
CVE
CVE
added 2024/02/15 1:59 p.m.429 views

CVE-2024-23113

CVE-2024-23113 is a format-string vulnerability in Fortinet FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. An attacker can trigger remote code execution by sending specially crafted packets that influence format-string processing in affected components. Affected versions include FortiOS 7...

9.8CVSS9.5AI score0.61725EPSS
In wildExploits8References2Affected Software4
Wiz blog
Wiz blog
added 2024/02/12 1:53 p.m.77 views

February Fortinet Advisory: everything you need to know

Fortinet offers guidance to detect and mitigate CVE-2024-21762 and CVE-2024-23113, critical RCE vulnerabilities in FortiOS and FortiProxy, including guidance that organizations should patch urgently...

9.8CVSS9.7AI score0.80835EPSS
Exploits10
Circl
Circl
added 2024/02/09 4:0 a.m.10 views

CVE-2024-23113

creationtimestamp| type| source ---|---|--- 2024-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1225 2024-02-09 08:40:20+00:00| seen| https://www.cert.at/de/warnungen/2024/2/kritische-sicherheitslucken-in-fortinet-fortios-updates-verfugbar 2024-02-09 10:14:28+00:00|...

9.8CVSS7.5AI score0.61725EPSS
Exploits8References51
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.113 views

Fortinet Fortigate Format String Bug in fgfmd (FG-IR-24-029)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-029 advisory. - A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0...

9.8CVSS8.9AI score0.61725EPSS
Exploits8References2
Circl
Circl
added 2022/01/12 10:17 p.m.3 views

CVE-2022-23113

creationtimestamp| type| source ---|---|--- 2022-01-12 22:17:28+00:00| seen| https://t.me/cibsecurity/35363...

4.3CVSS4.6AI score0.01504EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/01/12 7:6 p.m.9 views

CVE-2022-23113

Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files...

6.9AI score0.01504EPSS
Exploits0References2
CVE
CVE
added 2022/01/12 7:6 p.m.95 views

CVE-2022-23113

CVE-2022-23113 affects Jenkins Publish Over SSH Plugin 1.22 and earlier. The issue is a path traversal vulnerability caused by insufficient validation of the file name, allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files. Connected sources corrob...

4.3CVSS4.3AI score0.01504EPSS
Exploits0References2Affected Software1
CVE
CVE
added 1976/01/01 12:0 a.m.39 views

CVE-2021-23113

CVE-2021-23113 entry is rejected and not used.

7.4AI score
Exploits0
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.11 views

CVE-2021-23113

...

Exploits0
Rows per page
Query Builder