Lucene search
+L

2024 matches found

BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•18 views

The vulnerability of the microprogramming software of the PHOENIX CONTACT FL/TC MGUARD family allows a attacker to cause a service failure.

The vulnerability of the microprogrammed software of the PHOENIX CONTACT FL/TC MGUARD family is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

5.8CVSS5.9AI score0.0062EPSS
SaveExploits0References3Affected Software26
Openbugbounty
Openbugbounty
•added 2023/07/07 5:37 p.m.•18 views

phoenix-auction.com Cross Site Scripting vulnerability OBB-3488198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/06/21 8:56 p.m.•9 views

phoenixartdeco.it Cross Site Scripting vulnerability OBB-3455355

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/06/13 7:15 a.m.•15 views

CVE-2023-2673

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

5.3CVSS5.8AI score0.0062EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/13 7:15 a.m.•32 views

CVE-2023-2673

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

5.3CVSS5.3AI score0.0062EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/13 7:15 a.m.•35 views

Input validation

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

5CVSS5.3AI score0.0062EPSS
SaveExploits0References1Affected Software26
Cvelist
Cvelist
•added 2023/06/13 6:16 a.m.•42 views

CVE-2023-2673 PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

5.3CVSS5.6AI score0.0062EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/06/13 6:16 a.m.•13 views

CVE-2023-2673 PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

5.3CVSS5.3AI score0.0062EPSS
SaveExploits0References1
CVE
CVE
•added 2023/06/13 6:16 a.m.•61 views

CVE-2023-2673

CVE-2023-2673 concerns the PHOENIX CONTACT FL/TC MGUARD Family, where improper input validation may allow UDP packets to bypass filtering rules and reach the device behind the MGUARD, potentially enabling flooding attacks. The NVD entry notes a network-exposed impact with availability impact (LOW...

5.3CVSS5.3AI score0.0062EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/13 12:00 a.m.•8 views

CVE-2023-2673: Improper Validation of Specified Type of Input

Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...

5.3CVSS5.9AI score0.0062EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/13 12:00 a.m.•20 views

PHOENIX CONTACT FL/TC MGUARD 输入验证错误漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX Electric Germany. An input validation error vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD that stems from a vulnerability that allows UDP packets to bypass filtering rules and access the uniquely connected device behi...

5.3CVSS5.7AI score0.0062EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2023/05/14 6:58 p.m.•12 views

phoenixpackaging.com Cross Site Scripting vulnerability OBB-3334773

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/05/11 6:32 a.m.•14 views

phoenixtyres.ie Cross Site Scripting vulnerability OBB-3319965

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
•added 2023/05/10 1:24 p.m.•17 views

MAL-2023-439 Malicious code in fierce-obsessions-the-phoenix-pack-6-by-suzanne-wright-online-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d309b64e65ce538e138c50c84a995d8c8015ab61d9affd4cffdc92a79d71738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/04/26 12:00 a.m.•28 views

Phoenix Contact ENERGY AXC PU Path Traversal (CVE-2023-1109)

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

8.8CVSS7.7AI score0.00759EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/17 8:15 a.m.•15 views

CVE-2023-1109

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

8.8CVSS7.3AI score0.00759EPSS
SaveExploits0References2
NVD
NVD
•added 2023/04/17 8:15 a.m.•34 views

CVE-2023-1109

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

8.8CVSS8.8AI score0.00759EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/17 8:15 a.m.•27 views

Design/Logic Flaw

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

6.5CVSS8.6AI score0.00759EPSS
SaveExploits0References2Affected Software4
Vulnrichment
Vulnrichment
•added 2023/04/17 7:32 a.m.•10 views

CVE-2023-1109 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...

8.8CVSS8.7AI score0.00759EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/17 7:32 a.m.•73 views

CVE-2023-1109

Phoenix Contact ENERGY AXC PU Web Service is affected by a path traversal vulnerability (CVE-2023-1109). An authenticated restricted user can craft URLs through the upload/download functionality to access, read, write, and create files across the file system, potentially gaining full control of t...

8.8CVSS8.8AI score0.00759EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder