Lucene search
+L

123 matches found

NVD
NVD
added 2024/05/24 9:15 a.m.22 views

CVE-2024-5310

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

5.4CVSS3.4AI score0.00364EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/05/24 9:0 a.m.12 views

CVE-2024-5310 JFinalCMS content cross site scripting

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

5.1CVSS6.2AI score0.00364EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/05/24 9:0 a.m.18 views

CVE-2024-5310 JFinalCMS content cross site scripting

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

5.1CVSS3.4AI score0.00364EPSS
SaveExploits1References3
Circl
Circl
added 2024/03/19 10:41 a.m.9 views

CVE-2020-5310

creationtimestamp| type| source ---|---|--- 2024-03-19 10:41:08+00:00| seen| https://t.me/ctinow/211332...

8.8CVSS6.1AI score0.01975EPSS
SaveExploits0References1
Circl
Circl
added 2024/01/11 4:31 p.m.10 views

CVE-2023-5310

creationtimestamp| type| source ---|---|--- 2024-01-11 16:31:37+00:00| seen| https://t.me/ctinow/166620...

6.5CVSS6.4AI score0.00348EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/15 4:5 p.m.25 views

CVE-2023-5310 Z-Wave Denial of Service caused by Stream of Packets

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 Gecko SDK v4.3.3 and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device...

5.7CVSS6.6AI score0.00348EPSS
SaveExploits0References2
CVE
CVE
added 2023/12/15 4:5 p.m.57 views

CVE-2023-5310

CVE-2023-5310 describes a denial-of-service vulnerability affecting Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. The issue arises when devices on the network receive a stream of packets, leading to availability impact. Affected com...

6.5CVSS5.9AI score0.00348EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2023/09/20 7:40 a.m.31 views

Low: Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.13.3-1 security update

Red Hat Integration Camel Extensions for Quarkus 2.13.3-1 release and security update is now available. Red Hat Product Security has rated this update as having an impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.1CVSS7.2AI score0.01215EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.6 views

The vulnerability of the Telnet service of the cable modem Hitron CODA-5310, which allows a hacker to elevate their privileges to the level of an administrator.

The vulnerability of the Telnet service of the cable modem Hitron CODA-5310 is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to elevate their privileges to the level of an administrator...

10CVSS7.7AI score0.00848EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.11 views

The vulnerability of the Telnet service of the cable modem Hitron CODA-5310 allows a intruder to gain access to user and administrator credentials.

The vulnerability of the Telnet service of the Microcable Gateway Hitron CODA-5310 lies in the transmission of confidential information in plaintext. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user and administrator credentials...

7.8CVSS7.2AI score0.00491EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.8 views

The configuration interface vulnerability of the Hitron CODA-5310 cable switch allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability of the Hitron CODA-5310 cable gateway configuration interface is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause service failures...

10CVSS8.2AI score0.00926EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.11 views

The vulnerability of the cable gateway Hitron CODA-5310 arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary commands.

The vulnerability of the Hitron CODA-5310 cable gateway exists due to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

8.3CVSS7.4AI score0.01281EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/06/07 12:0 a.m.51 views

Hitron Technologies CODA-5310 Remote Command Execution Vulnerability

Hitron Technologies CODA-5310 is a wireless router. The Hitron Technologies CODA-5310 suffers from a remote command execution vulnerability that can be exploited by an attacker to perform a command injection attack using the administration page to execute arbitrary system commands, manipulate the...

7.2CVSS8.1AI score0.01281EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/02 11:15 a.m.5 views

CVE-2023-30603

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

9.8CVSS5.9AI score0.00848EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/02 11:15 a.m.4 views

CVE-2023-30604

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

9.8CVSS5.9AI score0.00926EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.16 views

CVE-2023-30604

It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthorized remote attacker can exploit this vulnerability to access system configuration interface, resulting in performing arbitrary system operation or...

9.8CVSS9.5AI score0.00926EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.16 views

CVE-2023-30603

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

9.8CVSS9.7AI score0.00848EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.9 views

CVE-2022-47617

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

7.2CVSS6.9AI score0.0051EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/02 11:15 a.m.5 views

CVE-2023-30602

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...

7.5CVSS7.2AI score0.00491EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/02 11:15 a.m.15 views

CVE-2022-47616

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service...

7.2CVSS7.4AI score0.01281EPSS
SaveExploits0References1
Rows per page
Query Builder