CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3234 matches found

OSV•added 2023/08/09 7:15 a.m.•10 views

CVE-2023-37856

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser...

4.3CVSS5.8AI score0.00429EPSS

SaveExploits0References1

NVD•added 2023/08/09 7:15 a.m.•26 views

CVE-2023-37856

4.3CVSS4.8AI score0.00429EPSS

SaveExploits0References1

CNNVD•added 2023/08/09 12:0 a.m.•8 views

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACT WP 6xxx series versions prior to 4.0.10, which originates in the web panels, where a remote attacker with low privileges can gain limited read...

4.3CVSS6.7AI score0.00429EPSS

SaveExploits0References2

Prion•added 2023/08/04 9:15 p.m.•24 views

Xxe

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity XXE entries when parsing certain XML...

5.5CVSS7.9AI score0.00734EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/08/04 8:52 p.m.•48 views

CVE-2020-26064

6.5CVSS8AI score0.00734EPSS

SaveExploits0References1

OSV•added 2023/08/03 10:15 p.m.•7 views

CVE-2023-20214

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. This vulnerability is...

9.1CVSS5.8AI score0.00915EPSS

SaveExploits0References1

BDU FSTEC•added 2023/07/28 12:0 a.m.•10 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain read access to data and modify it.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves errors in processing input data. Exploiting this vulnerability can allow an attacker to gain read access to data and modify it...

6.4CVSS6.8AI score0.00374EPSS

SaveExploits0References4Affected Software1

Microsoft CVE•added 2023/07/26 7:0 a.m.•5 views

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H).

...

5.9CVSS6.8AI score0.01319EPSS

SaveExploits0