Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:35 p.m.6 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.1CVSS6.6AI score0.00549EPSS
Exploits1References1
NVD
NVD
added 2025/12/09 4:18 p.m.4 views

CVE-2025-65287

An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files. The CGI concatenates the user-supplied params directly onto the base path /var/www/files/userScript/ using memcpy + strcat without validation or...

7.5CVSS0.00722EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/09 12:0 a.m.19 views

CVE-2025-65287

An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files. The CGI concatenates the user-supplied params directly onto the base path /var/www/files/userScript/ using memcpy + strcat without validation or...

0.00722EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-42820

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00935EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-37439

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00884EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:10 a.m.6 views

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

9.8CVSS7.6AI score0.00935EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 2:2 a.m.6 views

CVE-2023-33274

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and...

9.8CVSS7.4AI score0.00884EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/12 9:15 a.m.2 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.1CVSS6.7AI score0.00549EPSS
Exploits1References2
OSV
OSV
added 2023/12/12 9:15 a.m.4 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.1CVSS6.1AI score0.00549EPSS
Exploits1References1
Prion
Prion
added 2023/12/12 9:15 a.m.16 views

Cross site scripting

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

5.8CVSS6.8AI score0.00549EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/12/12 12:0 a.m.16 views

CVE-2023-49563

Cross Site Scripting XSS in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a crafted script within a request to the webserver...

6.3AI score0.00549EPSS
Exploits1References1
CVE
CVE
added 2023/12/12 12:0 a.m.39 views

CVE-2023-49563

Summary: CVE-2023-49563 affects Voltronic Power SNMP Web Pro, version 1.1. The issue is a Cross Site Scripting (XSS) vulnerability in the web interface that allows an attacker to execute arbitrary code via a crafted script in a request to the webserver. The description across sources consistently...

6.1CVSS6.1AI score0.00549EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/12 12:0 a.m.3 views

Voltronic Power SNMP Web Pro 安全漏洞

Voltronic Power SNMP Web Pro is an SNMP network card management software from Voltronic Power. Voltronic Power SNMP Web Pro suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via specially crafted scripts...

6.1CVSS6.9AI score0.00549EPSS
Exploits1References2
NVD
NVD
added 2023/09/12 10:15 p.m.10 views

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

9.8CVSS9.4AI score0.00935EPSS
Exploits0References1
Prion
Prion
added 2023/09/12 10:15 p.m.23 views

Cross site request forgery (csrf)

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

7.5CVSS9.4AI score0.00935EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/12 12:0 a.m.8 views

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

7.6AI score0.00935EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.4 views

PT-2023-26775 · Unknown · Snmp Web Pro

Name of the Vulnerable Software and Affected Versions: SNMP Web Pro version 1.1 Description: An issue in the software allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted request. Recommendations: For SNMP Web Pro version 1.1, consider disabling the...

9.8CVSS9.5AI score0.00935EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/09/12 12:0 a.m.17 views

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

9.6AI score0.00935EPSS
Exploits0References1
NVD
NVD
added 2023/07/12 9:15 p.m.21 views

CVE-2023-33274

The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and...

9.8CVSS0.00884EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.6 views

PT-2023-24259 · Unknown · Powershield Snmp Web Pro

Name of the Vulnerable Software and Affected Versions: PowerShield SNMP Web Pro version 1.1 Description: The authentication mechanism contains an issue that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This...

9.8CVSS9.6AI score0.00884EPSS
Exploits1References3
Rows per page
Query Builder