Lucene search
+L

180 matches found

CNNVD
CNNVD
added 2023/07/21 12:0 a.m.6 views

Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in version 2.0 of the Chengdu Flash Flood Disaster Monitoring and Warning System where an incorrect operation of the parameter userFile can lead to...

9.8CVSS6.5AI score0.00893EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/07/21 12:0 a.m.6 views

PT-2023-26261 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic vulnerability was found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects the file /Service/FileHandler.ashx...

9.8CVSS5.8AI score0.00893EPSS
Exploits1References8
NVD
NVD
added 2023/07/20 10:15 p.m.15 views

CVE-2023-3798

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /AppResource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit...

9.8CVSS6.8AI score0.0088EPSS
Exploits1References3
OSV
OSV
added 2023/07/20 10:15 p.m.4 views

CVE-2023-3798

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /AppResource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit...

9.8CVSS6AI score0.0088EPSS
Exploits1References3
Prion
Prion
added 2023/07/20 10:15 p.m.21 views

Design/Logic Flaw

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /AppResource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit...

5.2CVSS9.4AI score0.0088EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/07/20 10:0 p.m.57 views

CVE-2023-3798

CVE-2023-3798 affects Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. The vulnerability is in the file path "/App_Resource/UEditor/server/upload.aspx" where manipulation of the file parameter enables unrestricted file upload. Exploitation status is disclosed publicly in the source...

9.8CVSS7.7AI score0.0088EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/07/20 10:0 p.m.20 views

CVE-2023-3798 Chengdu Flash Flood Disaster Monitoring and Warning System upload.aspx unrestricted upload

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /AppResource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit...

5.5CVSS9.7AI score0.0088EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/07/20 12:0 a.m.8 views

PT-2023-26227 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A critical issue has been discovered, affecting the /App Resource/UEditor/server/upload.aspx file, where the manipulation of the file argument leads to...

9.8CVSS5.8AI score0.0088EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/07/20 12:0 a.m.6 views

Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, the vulnerability stems from an unknown function in the file...

9.8CVSS6.4AI score0.00945EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/07/20 12:0 a.m.9 views

Chengdu Flash Flood Disaster Monitoring and Warning System 代码问题漏洞

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system in Chengdu. A code issue exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, the vulnerability stems from the parameter file in the file...

9.8CVSS6.5AI score0.0088EPSS
Exploits1References4
OSV
OSV
added 2023/06/12 3:15 p.m.7 views

CVE-2023-3206

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

7.5CVSS5.4AI score0.1871EPSS
Exploits1References3
NVD
NVD
added 2023/06/12 3:15 p.m.9 views

CVE-2023-3206

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

7.5CVSS6.1AI score0.1871EPSS
Exploits1References3
Prion
Prion
added 2023/06/12 3:15 p.m.26 views

Input validation

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

5CVSS7.5AI score0.1871EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/06/12 3:0 p.m.21 views

CVE-2023-3206 Chengdu VEC40G denial of service

A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched...

5.3CVSS7.8AI score0.1871EPSS
Exploits1References3
CVE
CVE
added 2023/06/12 3:0 p.m.44 views

CVE-2023-3206

CVE-2023-3206 affects Chengdu VEC40G 3.0. The vulnerability is in the file /send_order.cgi?parameter=restart, where supplying the value reboot can cause a denial of service. It can be exploited remotely and the exploit has been publicly disclosed. Several sources (NVD/Red Hat/CVE lists and third-...

7.5CVSS6.4AI score0.1871EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/12 12:0 a.m.8 views

PT-2023-23573 · Unknown · Chengdu Vec40G

Name of the Vulnerable Software and Affected Versions: Chengdu VEC40G version 3.0 Description: A problematic issue was found in the software, affecting an unknown functionality of the file "/send order.cgi?parameter=restart". The manipulation of the restart argument with the input reboot leads to...

7.5CVSS7AI score0.1871EPSS
Exploits1References5
NVD
NVD
added 2023/05/04 6:15 p.m.12 views

CVE-2023-2522

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

7.2CVSS6AI score0.33713EPSS
Exploits1References3
OSV
OSV
added 2023/05/04 6:15 p.m.3 views

CVE-2023-2522

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

7.2CVSS5.8AI score0.33713EPSS
Exploits1References3
Prion
Prion
added 2023/05/04 6:15 p.m.19 views

Command injection

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

5.8CVSS7.4AI score0.33713EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/04 5:31 p.m.16 views

CVE-2023-2522 Chengdu VEC40G Network Detection os command injection

A vulnerability was found in Chengdu VEC40G 3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sendorder.cgi?parameter=accessdetect of the component Network Detection. The manipulation of the argument COUNT with the input 3 | netstat -an...

5.8CVSS7.6AI score0.33713EPSS
Exploits1References3
Rows per page
Query Builder