CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

66 matches found

Prion•added 2023/07/17 6:15 p.m.•44 views

Command injection

A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affecte...

5.8CVSS8.9AI score0.00759EPSS

SaveExploits0References1Affected Software15

Prion•added 2023/07/17 6:15 p.m.•50 views

Buffer overflow

A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50W series firmware versions 4.16 through 5.36 Patch 2, USG20W-VPN series firmware versions 4.16 through 5.36 Patch 2, VPN...

3.3CVSS6.5AI score0.003EPSS

SaveExploits0References1Affected Software24

Prion•added 2023/07/17 6:15 p.m.•43 views

Command injection

A command injection vulnerability in the access point AP management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50W series firmware versions 5.00 through 5.36 Patch 2, USG20W-VPN series firmware...

5.4CVSS8.1AI score0.00684EPSS

SaveExploits0References1Affected Software24

Prion•added 2023/07/17 6:15 p.m.•41 views

Command injection

A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50W series firmware versions 5.10 through 5.36 Patch 2, USG20W-VPN series firmware versions 5.10...

5.8CVSS8.9AI score0.09882EPSS

SaveExploits2References1Affected Software22

Cvelist•added 2023/07/17 5:56 p.m.•41 views

CVE-2023-34141

8CVSS8.6AI score0.00684EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/17 5:56 p.m.•20 views

CVE-2023-34141

8CVSS7.9AI score0.00684EPSS

SaveExploits0References1

Cvelist•added 2023/07/17 5:49 p.m.•52 views

CVE-2023-34140

6.5CVSS7.2AI score0.003EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/17 5:49 p.m.•21 views

CVE-2023-34140

6.5CVSS7.3AI score0.003EPSS

SaveExploits0References1

Cvelist•added 2023/07/17 5:36 p.m.•54 views

CVE-2023-34139

8.8CVSS9.3AI score0.00759EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/17 5:36 p.m.•29 views

CVE-2023-34139

8.8CVSS8.2AI score0.00759EPSS

SaveExploits0References1

Cvelist•added 2023/07/17 5:31 p.m.•53 views

CVE-2023-34138

A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50W series firmware versions 4.60 through 5.36 Patch 2, USG20W-VPN series firmware version...

8CVSS8.6AI score0.00684EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/17 5:31 p.m.•27 views

CVE-2023-34138

8CVSS7.9AI score0.00684EPSS

SaveExploits0References1

CVE•added 2023/07/17 5:23 p.m.•103 views

CVE-2023-33012

CVE-2023-33012 is a command-injection vulnerability in the configuration parser of Zyxel devices (ATP, USG FLEX/50(W), USG20(W)-VPN, VPN series). The root cause is a flaw in parsing GRE configurations when cloud management mode is enabled, allowing an unauthenticated, LAN-based attacker to execut...

8.8CVSS8.9AI score0.09882EPSS

SaveExploits2References1Affected Software1

CVE•added 2023/07/17 5:15 p.m.•112 views

CVE-2023-33011

CVE-2023-33011 corresponds to a format-string vulnerability in Zyxel firmware affecting Zyxel ATP series (5.10–5.36 Patch 2), USG FLEX series (5.00–5.36 Patch 2), USG FLEX 50(W) (5.10–5.36 Patch 2), USG20(W)-VPN (5.10–5.36 Patch 2), and VPN series (5.00–5.36 Patch 2). The flaw permits an unauthen...

8.8CVSS8.6AI score0.0034EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/07/17 5:15 p.m.•68 views

CVE-2023-33011

A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50W series firmware versions 5.10 through 5.36 Patch 2, USG20W-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN...

8.8CVSS8.9AI score0.0034EPSS

SaveExploits0References1

NVD•added 2023/07/17 5:15 p.m.•31 views

CVE-2023-28767

The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX series firmware versions 5.00 through 5.36, USG FLEX 50W series firmware versions 5.10 through 5.36, USG20W-VPN series firmware versions 5.10 through 5.36, and VP...

8.8CVSS0.00404EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/17 4:59 p.m.•21 views

CVE-2023-28767

8.8CVSS7AI score0.00404EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2023/07/17 12:00 a.m.•9 views

CVE-2023-34141: Improper Neutralization of Special Elements used in an OS Command

8CVSS7.6AI score0.00684EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/07/17 12:00 a.m.•8 views

CVE-2023-34140: Buffer Copy without Checking Size of Input

6.5CVSS6.8AI score0.003EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/07/17 12:00 a.m.•11 views

CVE-2023-34139: Improper Neutralization of Special Elements used in an OS Command

8.8CVSS7.9AI score0.00759EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by