CVE-2023-1619

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet...

Design/Logic Flaw

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime...

CVE-2023-1620

CVE-2023-1620 affects WAGO devices using the CODESYS V2 runtime (WAGO 750 controllers). An authenticated attacker with high privileges can cause a Denial of Service by sending a specifically crafted packet to the CODESYS V2 runtime. Available sources indicate DoS as the impact; no public exploit ...

CVE-2023-1619

WAGO 750 controllers (CODESYS 2.3 Runtime) are affected by CVE-2023-1619. An authenticated, high-privilege attacker can cause a DoS by sending specially crafted malformed packets due to insufficient input validation. Root cause and details are supported by PT-2023-3435 (insufficient input validat...

CVE-2023-1619: Improper Validation of Consistency within Input

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet...

CVE-2023-32522: Improper Limitation of a Pathname to a Restricted Directory

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

Ateme Flamingo XL 安全漏洞

Ateme Flamingo XL is an application from Ateme. A security vulnerability exists in Ateme Flamingo XL version v.3.6.20 and XS version v.3.6.5. An authenticated, remote attacker can exploit this vulnerability to execute arbitrary code and cause a denial of service via the session expiration feature...

Advantech R-SeeNet 信任管理问题漏洞

Advantech R-SeeNet is an industrial monitoring software from Advantech, China. A security vulnerability exists in Advantech R-SeeNet, which can be exploited by an authenticated, remote attacker to submit a special request for unauthorized access to the system...

Synology DiskStation Manager 代码问题漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology, a Chinese company. This operating system manages information such as data, files, photos, music, and more. A code issue vulnerability previously existed in Synology DiskStation Manager...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

CVE-2023-33653

Sitecore Experience Platform XP v9.3 was discovered to contain an authenticated remote code execution RCE vulnerability via the component /Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTML...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

CVE-2023-33477: Missing Authorization

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

CVE-2023-27989

A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00ABUV.8C0 could allow a remote authenticated attacker to cause denial of service DoS conditions by sending a crafted HTTP request to a vulnerable device...

CVE-2023-28699

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disru...

CVE-2023-28699: Unrestricted Upload of File with Dangerous Type

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disru...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability caused by a failure to properly boundary check the AddMacList interface on /goform/aspForm. An authenticated, remote attacker could exploit this vulnerability to cau...

CVE-2023-33722: Improper Neutralization of Special Elements used in a Command

EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution RCE vulnerability via the pppUserName parameter...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability caused by a failure to properly bounds check the SetMobileAPInfoById interface on /goform/aspForm. An authenticated, remote attacker could exploit this vulnerability...

PT-2023-22605

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 17.0.1 Zyxel ATP Series, USG FLEX Series, USG FLEX 50W Series, and USG20W-VPN Series affected versions not specified Description The issue allows remote code execution by an authenticated user via an uppercase...