CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

12226 matches found

ATTACKERKB•added 2024/05/03 2:15 a.m.•12 views

CVE-2023-27360

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.6AI score0.00449EPSS

SaveExploits0References3Affected Software1

OSV•added 2024/05/03 2:15 a.m.•7 views

CVE-2023-27361

NETGEAR RAX30 rexcgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is required to exploit this vulnerability. The...

8CVSS6.3AI score0.00856EPSS

SaveExploits0References2

OSV•added 2024/05/03 2:15 a.m.•13 views

CVE-2023-27360

8.8CVSS6.3AI score0.00449EPSS

SaveExploits0References2

NVD•added 2024/05/03 2:15 a.m.•32 views

CVE-2023-27360

8.8CVSS8AI score0.00449EPSS

SaveExploits0References2

OSV•added 2024/05/03 2:15 a.m.•5 views

CVE-2023-27357

NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific...

6.5CVSS5.7AI score

SaveExploits0References2

OSV•added 2024/05/03 2:15 a.m.•8 views

CVE-2023-27358

NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

8.8CVSS5.8AI score0.00877EPSS

SaveExploits0References2

OSV•added 2024/05/03 2:15 a.m.•7 views

CVE-2023-27356

NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing...

8CVSS6.2AI score0.01238EPSS

SaveExploits0References2

ATTACKERKB•added 2024/05/03 2:15 a.m.•9 views

CVE-2023-27356

8CVSS7.1AI score0.01238EPSS

SaveExploits0References3Affected Software1

NVD•added 2024/05/03 2:15 a.m.•28 views

CVE-2023-27357

6.5CVSS6.2AI score0.00571EPSS

SaveExploits0References2

NVD•added 2024/05/03 2:15 a.m.•27 views

CVE-2023-27358

8.8CVSS9.1AI score0.00877EPSS

SaveExploits0References2

ATTACKERKB•added 2024/05/03 2:15 a.m.•4 views

CVE-2023-27357

6.5CVSS6.8AI score0.00571EPSS

SaveExploits0References3Affected Software1

ATTACKERKB•added 2024/05/03 2:15 a.m.•4 views

CVE-2023-27358

8.8CVSS7.2AI score0.00877EPSS

SaveExploits0References3Affected Software1

NVD•added 2024/05/03 2:15 a.m.•20 views

CVE-2023-27356

8CVSS7.2AI score0.01238EPSS

SaveExploits0References2

Cvelist•added 2024/05/03 2:14 a.m.•32 views

CVE-2023-50231 NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploi...

8CVSS7.8AI score0.53303EPSS

SaveExploits0References2

CVE•added 2024/05/03 2:14 a.m.•82 views

CVE-2023-50231

CVE-2023-50231 affects NETGEAR ProSAFE Network Management System. The flaw is in the saveNodeLabel method, where improper validation of user-supplied data permits injection of arbitrary scripts, enabling privilege escalation on affected installations. Exploitation details in provided docs indicat...

9.6CVSS7.6AI score0.53303EPSS

SaveExploits0References2Affected Software1

EUVD•added 2024/05/03 2:14 a.m.•8 views

EUVD-2023-55053

9.6CVSS7.7AI score0.53303EPSS

SaveExploits0References2

Vulnrichment•added 2024/05/03 2:14 a.m.•18 views

CVE-2023-50231 NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

8CVSS6.7AI score0.53303EPSS

SaveExploits0References2

Vulnrichment•added 2024/05/03 2:14 a.m.•22 views

CVE-2023-44450 NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to explo...

8.8CVSS8.6AI score0.53563EPSS

SaveExploits0References2

CVE•added 2024/05/03 2:14 a.m.•97 views

CVE-2023-44450

CVE-2023-44450 affects NETGEAR ProSAFE Network Management System. Impact comes from the getNodesByTopologyMapSearch function, where unsanitized user input is used to build SQL queries, enabling remote code execution with SYSTEM privileges after authentication. Multiple sources (NVD, ZDI, CVE list...

8.8CVSS9.1AI score0.53563EPSS

SaveExploits0References2Affected Software1

CVE•added 2024/05/03 2:14 a.m.•87 views

CVE-2023-44449

NETGEAR ProSAFE Network Management System is affected by a SQL Injection in clearAlertByIds, caused by insufficient validation of user input used to build SQL queries. This allows a remote attacker with authentication to escalate privileges to protected resources. The flaw is documented across mu...

8.8CVSS9.1AI score0.52562EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by