The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms lies in the lack of authentication procedures, which allow attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP software integration platforms is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to remotely enhance their privileges and gain unauthorized access to protected information...

CVE-2023-38758

Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the licenseauthor field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components...

CVE-2023-33913

In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed...

CVE-2023-36213

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function...

CVE-2023-36082

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials...

The vulnerability of the ASD service of the IQ Engine wireless access point operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the ASD service of the IQ Engine HiveOS wireless access point operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of measures to neutralize special elements used in the operating system’s processing of the...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 lies in the lack of measures to neutralize special elements during the processing of URL parameters when connecting to the...

The vulnerability of the microprogramming software of the Link DIR-885L, which allows a hacker to increase their privileges

The vulnerability of the Link DIR-885L router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of measures to neutralize special elements used in the operating system’s processing of the SCEP CA...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 lies in the lack of measures to neutralize special elements used in the operating system’s processing of the upgrade-app U...

ASB-A-277824547

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Ruijie Networks Product 代码注入漏洞

Ruijie Networks Product is a series of Ruijie wireless products from China-based Ruijie Networks. A security vulnerability exists in the Ruijie Networks Product that originates from an API privilege that allows a remote attacker to escalate via a POST request to /cgi-bin/luci/ and affects the...

PT-2023-4061 · D Link · D-Link Dir-895

Name of the Vulnerable Software and Affected Versions: D-Link DIR-895 version FW102b07 Description: The issue is related to a function called phpcgi main in the D-Link DIR-895 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to ga...

The vulnerability of the endpoint management application for mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), is related to authentication procedures that lack sufficient safeguards. This allows attackers to escalate their privileges.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the createUser function in the system for managing, diagnosing, and optimizing the operation of network devices, ProSafe Network Management NMS300, allows a hacker to increase their privileges.

The vulnerability of the createUser function in the ProSafe Network Management NMS300 system, a device for managing, diagnosing, and optimizing network devices, lies in buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges remotely...

The vulnerability of the software platform for container deployment in the SUSE Rancher Wrangler production environment is related to insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of the software platform for container deployment in the SUSE Rancher production environment is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

The vulnerability of the clearAlertByIds function in the system for managing, diagnosing, and optimizing the operation of network devices. The ProSafe Network Management NMS300 allows a hacker to increase their privileges.

The vulnerability of the clearAlertByIds function in the system for managing, diagnosing, and optimizing network device operations is related to the lack of protection for the SQL query structure. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system, related to the ability to bypass authentication due to a fundamental error, allows attackers to enhance their privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network firewall management system is related to the ability to bypass authentication due to a fundamental error. Exploiting this vulnerability can allow attackers operating...

The vulnerability of the Memcached service of the microprogramming software used in the Elenos ETG150 transmitter allows a hacker to increase their privileges.

The vulnerability of the Memcached microprogramming system used by the Elenos ETG150 transmitter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...