Lucene search
+L

3267 matches found

OSV
OSV
•added 2023/10/03 9:15 p.m.•20 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.8CVSS5.8AI score0.02785EPSS
SaveExploits2References1
NVD
NVD
•added 2023/10/03 9:15 p.m.•40 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.8CVSS9.7AI score0.02785EPSS
SaveExploits2References1
Prion
Prion
•added 2023/10/03 9:15 p.m.•29 views

Command injection

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

7.5CVSS9.6AI score0.02785EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/03 12:00 a.m.•20 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

7.4AI score0.02785EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•21 views

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the ip parameter in the Ping check function being susceptible to operating system command injection...

9.8CVSS7.4AI score0.02785EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/10/03 12:00 a.m.•6 views

PT-2023-24257

Name of the Vulnerable Software and Affected Versions DTS Monitoring version 3.57.0 Description An issue was discovered in the software where the ip parameter within the Ping check function is vulnerable to OS command injection, specifically blind command injection. Recommendations For DTS...

9.8CVSS5.8AI score0.02785EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/03 12:00 a.m.•5 views

CVE-2023-33272: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.8CVSS8.2AI score0.02785EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2023/10/03 12:00 a.m.•49 views

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

9.9AI score0.02785EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2023/09/29 9:15 p.m.•12 views

CVE-2022-35908

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

8.8CVSS5.8AI score0.00806EPSS
SaveExploits0References3
OSV
OSV
•added 2023/09/29 9:15 p.m.•23 views

CVE-2022-35908

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

8.8CVSS5.8AI score0.00806EPSS
SaveExploits0References2
NVD
NVD
•added 2023/09/29 9:15 p.m.•39 views

CVE-2022-35908

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

8.8CVSS8.7AI score0.00806EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/29 9:15 p.m.•28 views

Code injection

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

6.5CVSS8.6AI score0.00806EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/29 12:00 a.m.•16 views

CVE-2022-35908

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

6.9AI score0.00806EPSS
SaveExploits0References2
CVE
CVE
•added 2023/09/29 12:00 a.m.•77 views

CVE-2022-35908

The CVE-2022-35908 affects Cambium Enterprise Wi‑Fi System Software prior to 6.4.2. Root cause: the device-agent does not sanitize the ping host argument. Impact is described as high (C, I, A all high) with Network attack vector and no user interaction required. Remediation: upgrade to version 6....

8.8CVSS8.6AI score0.00806EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/09/29 12:00 a.m.•50 views

CVE-2022-35908

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

8.9AI score0.00806EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/29 12:00 a.m.•8 views

CVE-2022-35908: Improper Limitation of a Pathname to a Restricted Directory

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

8.8CVSS7.8AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/29 12:00 a.m.•21 views

Cambium Networks Enterprise Wi-Fi System Software Security Vulnerability

Cambium Networks Enterprise Wi-Fi System Software is a simple yet sophisticated platform and tool for planning, deploying, and managing networks from Cambium Networks, USA. A security vulnerability exists in Cambium Networks Enterprise Wi-Fi System Software versions prior to 6.4.2 that stems from...

8.8CVSS6.7AI score0.00806EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/09/29 12:00 a.m.•32 views

PT-2023-13452 · Cambium · Cambium Enterprise Wi-Fi System

Name of the Vulnerable Software and Affected Versions: Cambium Enterprise Wi-Fi System Software versions prior to 6.4.2 Description: The issue is related to the lack of sanitization of the ping host argument in the device-agent of the Cambium Enterprise Wi-Fi System Software. This can potentially...

8.8CVSS7.1AI score0.00806EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2023/09/28 12:00 a.m.•31 views

The vulnerability of microprogrammed software in Advantech EKI-1524, EKI-1522, and EKI-1521 industrial switches stems from the lack of protective measures for website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the microprogrammed software in Advantech EKI-1524, EKI-1522, and EKI-1521 industrial switches exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the...

9CVSS5.6AI score0.01079EPSS
SaveExploits2References4Affected Software3
attackerkb
attackerkb
•added 2023/09/27 3:19 p.m.•14 views

CVE-2023-44170

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminping.php...

9.8CVSS5.9AI score0.01375EPSS
SaveExploits1References2
Rows per page
Query Builder