CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9838 matches found

NVD•added 2024/02/20 2:15 a.m.•38 views

CVE-2023-6399

A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...

6.5CVSS5.4AI score0.00649EPSS

SaveExploits0References1

CVE•added 2024/02/20 2:14 a.m.•94 views

CVE-2023-6764

CVE-2023-6764 is a format-string vulnerability in Zyxel devices’ IPSec VPN functionality. Affected products and versions include Zyxel ATP series firmware 4.32–5.37 Patch 1, USG FLEX series 4.50–5.37 Patch 1, USG FLEX 50(W) 4.16–5.37 Patch 1, and USG20(W)-VPN 4.16–5.37 Patch 1. An attacker could ...

8.1CVSS8.2AI score0.00889EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/02/20 2:14 a.m.•40 views

CVE-2023-6764

A format string vulnerability in a function of the IPSec VPN feature in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, and USG20W-VPN series...

8.1CVSS8.5AI score0.00889EPSS

SaveExploits0References1

Vulnrichment•added 2024/02/20 2:14 a.m.•27 views

CVE-2023-6764

8.1CVSS7.7AI score0.00889EPSS

SaveExploits0References1

CVE•added 2024/02/20 1:42 a.m.•95 views

CVE-2023-6399

CVE-2023-6399 is a format-string vulnerability in Zyxel devices (ATP series 4.32–5.37 Patch 1; USG FLEX 4.50–5.37 Patch 1; USG FLEX 50(W) 4.16–5.37 Patch 1; USG20(W)-VPN 4.16–5.37 Patch 1; USG FLEX H 1.10–1.10 Patch 1) that affects the Device Insight feature. The root cause is uncontrolled format...

6.5CVSS5.4AI score0.00649EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2024/02/20 1:42 a.m.•57 views

CVE-2023-6399

5.7CVSS5.7AI score0.00649EPSS

SaveExploits0References1

Vulnrichment•added 2024/02/20 1:42 a.m.•40 views

CVE-2023-6399

5.7CVSS6.6AI score0.00649EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2024/02/20 12:00 a.m.•4 views

CVE-2023-6764: Use of Externally-Controlled Format String

8.1CVSS6.2AI score0.00889EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2024/02/20 12:00 a.m.•5 views

CVE-2023-6399: Use of Externally-Controlled Format String

6.5CVSS5.8AI score0.00649EPSS

SaveExploits0References2

CNNVD•added 2024/02/20 12:00 a.m.•24 views

Zyxel ATP Formatting String Error Vulnerability

Zyxel ATP is a firewall from China Heqin Zyxel. A format string error vulnerability exists in Zyxel ATP versions 4.32 through 5.37 Patch 1, which stems from a format string vulnerability in the IPSec VPN feature...

8.1CVSS6.8AI score0.00889EPSS

SaveExploits0References2

OSV•added 2024/02/15 2:15 p.m.•15 views

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3,...

9.8CVSS7.4AI score0.61725EPSS

SaveExploits8References2

NVD•added 2024/02/15 2:15 p.m.•45 views

CVE-2024-23113

9.8CVSS9.6AI score0.61725EPSS

SaveExploits8References2

Vulnrichment•added 2024/02/15 1:59 p.m.•60 views

CVE-2024-23113

9.8CVSS7.3AI score0.61725EPSS

SaveExploits8References1

CVE•added 2024/02/15 1:59 p.m.•567 views

CVE-2024-23113

CVE-2024-23113 is a format-string vulnerability in Fortinet FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. An attacker can trigger remote code execution by sending specially crafted packets that influence format-string processing in affected components. Affected versions include FortiOS 7...

9.8CVSS9.5AI score0.61725EPSS

SaveIn wildExploits8References2Affected Software4

Cvelist•added 2024/02/15 1:59 p.m.•72 views

CVE-2024-23113

9.8CVSS9.8AI score0.61725EPSS

SaveExploits8References1

CNNVD•added 2024/02/15 12:00 a.m.•15 views

Fortinet FortiOS 格式化字符串错误漏洞

Fortinet FortiOS is a Fortinet security operating system dedicated to the FortiGate network security platform. Fortinet FortiProxy is a secure network proxy that protects employees from network attacks by combining a variety of detection technologies such as Web filtering, DNS filtering, DLP,...

9.8CVSS9.1AI score0.61725EPSS

SaveExploits8References3

Rapid7 Vulnerability Database (full)•added 2024/02/15 12:00 a.m.•3 views

CVE-2024-23113: Use of Externally-Controlled Format String

9.8CVSS8.4AI score0.61725EPSS

SaveExploits8References3

attackerkb•added 2024/02/15 12:00 a.m.•52 views

CVE-2024-23113

9.8CVSS7.4AI score0.61725EPSS

SaveIn wildExploits8References3

zdt•added 2024/02/11 12:00 a.m.•553 views

Zyxel zysh - Format string Exploit

Proof of concept format string exploit for Zyxel zysh. Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21,...

7.8CVSS7.3AI score0.06175EPSS

SaveExploits4

Exploit DB•added 2024/02/09 12:00 a.m.•444 views

Zyxel zysh - Format string

!/usr/bin/expect -f raptorzyshfhtagn.exp - zysh format string PoC exploit Copyright c 2022 Marco Ivaldi "We live on a placid island of ignorance in the midst of black seas of infinity, and it was not meant that we should voyage far." -- H. P. Lovecraft, The Call of Cthulhu "Multiple improper inpu...

7.8CVSS7.2AI score0.06175EPSS

SaveExploits4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by