Lucene search
K

23 matches found

OSV
OSV
added 3 days ago4 views

ROOT-OS-UBUNTU-2404-CVE-2026-23173 CVE-2026-23173 in rootio-linux - Patched by Root

Root has patched CVE-2026-23173 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.5CVSS5.9AI score0.00017EPSS
Exploits0
OSV
OSV
added 2026/02/19 6:9 a.m.2 views

BELL-CVE-2026-23173

Bulletin has no description...

5.5CVSS5.1AI score0.00017EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/02/16 6:54 a.m.3 views

CVE-2026-23173

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touching non-existent peers and ensures cleanup ...

5.5CVSS5AI score0.00017EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/16 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-23173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible port...

5.5CVSS6.1AI score0.00017EPSS
Exploits0References3
OSV
OSV
added 2026/02/14 4:15 p.m.2 views

DEBIAN-CVE-2026-23173

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touching non-existent peers and ensures cleanup ...

5.5CVSS5.1AI score0.00017EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/02/14 4:1 p.m.3 views

CVE-2026-23173

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touching non-existent peers and ensures cleanup ...

5.5CVSS5.1AI score0.00017EPSS
Exploits0
Circl
Circl
added 2025/06/18 11:41 p.m.1 views

CVE-2025-23173

creationtimestamp| type| source ---|---|--- 2025-06-18 23:41:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18823 2025-06-19 01:05:08+00:00| seen| Telegram/o4VR5fP0RObkYE5GCSWcOZP4OP4WWVDrridRceJ4mceL0...

7.5CVSS4.8AI score0.008EPSS
Exploits0References1
CVE
CVE
added 2025/06/18 11:30 p.m.8 views

CVE-2025-23173

The CVE-2025-23173 entry concerns Versa Director SD-WAN, where the websockify service is exposed on port 6080 via the Director GUI, allowing internet-accessible, direct web-based access to uCPE VMs. Public sources describe this as a risk vector with known weaknesses in websockify that could enabl...

7.5CVSS8AI score0.008EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/06/18 11:30 p.m.4 views

CVE-2025-23173

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...

7.5CVSS8AI score0.008EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/06/18 11:30 p.m.7 views

CVE-2025-23173

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...

7.5CVSS0.008EPSS
Exploits0References5
Circl
Circl
added 2025/04/16 4:55 p.m.1 views

CVE-2021-23173

creationtimestamp| type| source ---|---|--- 2025-04-16 16:55:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12088...

4.3CVSS4.7AI score0.00214EPSS
Exploits0References1
CVE
CVE
added 2024/06/13 7:40 p.m.44 views

CVE-2024-5951

CVE-2024-5951 affects Deep Sea Electronics DSE855 devices. The flaw occurs in the web-based UI where there is a lack of authentication before granting access to functions, enabling network-adjacent attackers to trigger a denial-of-service by abusing authenticated-access gaps. Documents consistent...

7.1CVSS6.7AI score0.00021EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/13 7:40 p.m.16 views

CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

7.1CVSS0.00021EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 7:40 p.m.16 views

CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability

Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Deep Sea Electronics DSE855 devices. Authentication is not required to exploit this...

7.1CVSS7AI score0.00021EPSS
Exploits0References1
Circl
Circl
added 2024/01/12 6:37 a.m.2 views

CVE-2024-23173

creationtimestamp| type| source ---|---|--- 2024-01-12 06:37:03+00:00| seen| https://t.me/ctinow/167085 2024-01-18 23:17:05+00:00| seen| https://t.me/ctinow/169989 2024-01-30 18:46:17+00:00| seen| https://t.me/ctinow/176172...

6.1CVSS6.3AI score0.00386EPSS
Exploits1References3
OSV
OSV
added 2024/01/12 5:15 a.m.15 views

CVE-2024-23173

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php...

6.1CVSS6AI score
Exploits0References2
CVE
CVE
added 2024/01/12 12:0 a.m.49 views

CVE-2024-23173

The CVE-2024-23173 issue affects the MediaWiki Cargo extension (before 1.35.14, 1.36.x–1.39.x before 1.39.6, and 1.40.x before 1.40.2). The vulnerability arises on the Special:Drilldown page where XSS can be triggered via artist, album, and position parameters due to filter values in drilldown/Ca...

6.1CVSS5.9AI score0.00386EPSS
Exploits1References2Affected Software1
Circl
Circl
added 2022/07/06 6:14 p.m.0 views

CVE-2022-23173

creationtimestamp| type| source ---|---|--- 2022-07-06 18:14:25+00:00| seen| https://t.me/cibsecurity/45659...

6.5CVSS6.3AI score0.00183EPSS
Exploits0References1
NVD
NVD
added 2022/07/06 2:15 p.m.12 views

CVE-2022-23173

this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" then he can see in this menu all the functionality of the application. If the attacker will try to click on one of the links, he will get a...

6.5CVSS0.00183EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/07/06 1:11 p.m.11 views

CVE-2022-23173 Priority - Priority web Insecure direct object references (IDOR)

this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" then he can see in this menu all the functionality of the application. If the attacker will try to click on one of the links, he will get a...

5.5CVSS6.5AI score0.00183EPSS
Exploits0References1
Rows per page
Query Builder