4250 matches found
PT-2023-3171 · Zyxel · Zyxel Nas326 +2
Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 versions prior to V5.21AAZF.14C0 Zyxel NAS540 versions prior to V5.21AATB.11C0 Zyxel NAS542 versions prior to V5.21ABAG.11C0 Description: The pre-authentication command injection issue in Zyxel NAS devices could allow an...
CVE-2023-32753
OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service...
CVE-2023-32753
This CVE appears in OMICARD EDM where the file upload function does not restrict uploading of dangerous file types. The root cause is a lack of validation for uploaded content, allowing an unauthenticated attacker to upload and execute arbitrary executables, potentially enabling system commands o...
CVE-2023-32752: Unrestricted Upload of File with Dangerous Type
L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt servi...
PT-2023-3079
Name of the Vulnerable Software and Affected Versions Citrix Content Collaboration ShareFile affected versions not specified Description A vulnerability has been discovered in the customer-managed ShareFile storage zones controller, which could allow an unauthenticated attacker to remotely...
CVE-2023-35034
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033...
CVE-2023-34409
In Percona Monitoring and Management PMM server 2.x before 2.37.1, the authenticate function in authserver.go does not properly formalize and sanitize URL paths to reject path traversal attempts. This allows an unauthenticated remote user, when a crafted POST request is made against unauthenticat...
CVE-2023-30602
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
CVE-2023-28698
Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...
CVE-2023-30603
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...
CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
CVE-2023-28701 ELITE Web Fax - SQL Injection
ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service...
CVE-2023-30602: Cleartext Transmission of Sensitive Information
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and administrator...
Welotec TK500 Access Control Vulnerability
The Welotec TK500 is an industrial-grade 4G LTE router from Welotec. The Welotec TK500 suffers from an access control error vulnerability that originates from the fact that an unauthenticated, remote attacker who knows the name of the MQTT topic can send and receive messages, including GET/SET...
Cisco Small Business security vulnerabilities
Cisco Small Business is a switch from Cisco. A security vulnerability exists in Cisco Small Business Series Switches that stems from multiple vulnerabilities in the web-based user interface. An unauthenticated, remote attacker could exploit this vulnerability to cause a denial of service DoS or...
Cisco Small Business security vulnerabilities
Cisco Small Business is a switch from Cisco. A security vulnerability exists in Cisco Small Business Series Switches that stems from multiple vulnerabilities in the web-based user interface. An unauthenticated, remote attacker could exploit this vulnerability to cause a denial of service DoS or...
CVE-2023-20156
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...
CVE-2023-20158
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...
SICK Flexi Classic Access Control Vulnerability
SICK FX0-GENT00000 is a security control module from SICK with a built-in Ethernet switch. A security vulnerability exists in SICK Flexi Classic, Flexi Soft Gateways that originates from a vulnerability that could allow an unauthenticated, remote attacker to change the IP settings of the device v...
UBUNTU-CVE-2023-2156
A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of...