Lucene search
+L

819 matches found

OSV
OSV
added 2024/05/03 3:15 a.m.6 views

CVE-2023-39461

Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to write arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required...

4.4CVSS5.5AI score0.01028EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 3:15 a.m.6 views

CVE-2023-39462

Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the...

6.5CVSS5.8AI score0.01215EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.5 views

CVE-2023-39462

Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the...

6.5CVSS6.4AI score0.01215EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.4 views

CVE-2023-39460

Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...

7.2CVSS6.6AI score0.02854EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.5 views

CVE-2023-39461

Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to write arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required...

4.4CVSS5.3AI score0.01028EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/03 3:15 a.m.8 views

CVE-2023-39457

Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability. The specific flaw...

9.8CVSS6.1AI score0.01623EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.4 views

CVE-2023-39457

Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability. The specific flaw...

9.8CVSS7.8AI score0.01623EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/05/03 2:15 a.m.5 views

CVE-2023-35727

D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.00855EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.5 views

CVE-2023-34278

D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this...

8CVSS6.2AI score0.0176EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/03 2:15 a.m.6 views

CVE-2023-32149

D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.0124EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.6 views

CVE-2023-32151

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing...

6.8CVSS6.2AI score0.01796EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.2 views

CVE-2023-27359

TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

9.8CVSS7.1AI score0.01159EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.9 views

CVE-2023-27324

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host...

7.8CVSS7.4AI score0.00369EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/03 2:15 a.m.6 views

CVE-2023-27322

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host...

7.8CVSS6.2AI score0.00369EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.9 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the root context...

8.8CVSS7.7AI score0.00855EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.6 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the root context...

8.8CVSS7.7AI score0.00855EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.8 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. The D-Link DAP-2622 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code in the root context...

8.8CVSS7.7AI score0.00855EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/03 5:15 p.m.7 views

CVE-2024-1180

TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605. Authentication is required to exploit this vulnerability. The specific issue...

8CVSS7.1AI score0.00973EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/03 12:0 a.m.8 views

The vulnerability of the PMIx process management interface, related to synchronization errors when using a common resource, allows a perpetrator to gain access to confidential data.

The vulnerability of the PMIx process management interface is related to the execution of code from the library with UID 0. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

8.1CVSS7.8AI score0.01121EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/03/15 12:0 a.m.15 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary code with root user privileges.

The vulnerability of the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root user privileges...

8.5CVSS7.4AI score0.00793EPSS
SaveExploits0References3
Rows per page
Query Builder