Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

100 matches found

ATTACKERKB
ATTACKERKB•added 2024/05/03 3:16 a.m.•6 views

CVE-2023-51590

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. T...

9.8CVSS6.3AI score0.01483EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB•added 2024/05/03 3:16 a.m.•2 views

CVE-2023-51593

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.3AI score0.01603EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2024/05/03 3:16 a.m.•23 views

CVE-2023-51588

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS7.8AI score0.00234EPSS
SaveExploits0References1
OSV
OSV•added 2024/05/03 3:16 a.m.•8 views

CVE-2023-51593

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.3AI score0.01603EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2024/05/03 3:16 a.m.•14 views

CVE-2023-51588

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS6.1AI score0.00234EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2024/05/03 3:16 a.m.•21 views

CVE-2023-51591

Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

7.5CVSS6.2AI score0.01108EPSS
SaveExploits0References1
OSV
OSV•added 2024/05/03 3:16 a.m.•6 views

CVE-2023-51584

Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in...

8.8CVSS6.3AI score0.01127EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2024/05/03 3:16 a.m.•3 views

CVE-2023-51585

Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in that a...

8.8CVSS6.2AI score0.01396EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB•added 2024/05/03 3:16 a.m.•4 views

CVE-2023-51584

Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. User interaction is required to exploit this vulnerability in...

8.8CVSS6.2AI score0.01127EPSS
SaveExploits0References2Affected Software1
OSV
OSV•added 2024/05/03 3:16 a.m.•7 views

CVE-2023-51586

Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS7.8AI score0.01331EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2024/05/03 3:16 a.m.•6 views

CVE-2023-51586

Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS6.4AI score0.01331EPSS
SaveExploits0References2Affected Software1
CVE
CVE•added 2024/05/03 2:15 a.m.•63 views

CVE-2023-51595

Vulnerability (CVE-2023-51595) : Voltronic Power ViewPower Pro is affected by a SQL injection in the selectDeviceListBy method. The flaw stems from insufficient validation of a user-supplied string used to build SQL queries, allowing an attacker to execute arbitrary code in the context of LOCAL S...

9.8CVSS9.9AI score0.48168EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2024/05/03 2:15 a.m.•41 views

CVE-2023-51595 Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS10AI score0.48168EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/05/03 2:15 a.m.•35 views

CVE-2023-51593 Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS10AI score0.01603EPSS
SaveExploits0References1
CVE
CVE•added 2024/05/03 2:15 a.m.•76 views

CVE-2023-51593

Voltronic Power ViewPower Pro is affected by a remote code execution due to a Struts2 expression language injection flaw. The vulnerability allows unauthenticated attackers to execute arbitrary code in the context of LOCAL SERVICE. Root cause: a vulnerable expression language handling in a Struts...

9.8CVSS9.9AI score0.01603EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2024/05/03 2:15 a.m.•20 views

CVE-2023-51593 Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The...

9.8CVSS8.4AI score0.01603EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2024/05/03 2:15 a.m.•22 views

CVE-2023-51590 Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability

Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. T...

9.8CVSS8AI score0.01483EPSS
SaveExploits0References1
CVE
CVE•added 2024/05/03 2:15 a.m.•73 views

CVE-2023-51590

CVE-2023-51590 affects Voltronic Power ViewPower Pro. The vulnerability is an unrestricted file upload in the UpLoadAction class, caused by insufficient validation of user-supplied data. This allows remote attackers to upload arbitrary files and execute code with LOCAL SERVICE privileges, without...

9.8CVSS9.8AI score0.01483EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2024/05/03 2:15 a.m.•14 views

CVE-2023-51588 Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS7.2AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2024/05/03 2:15 a.m.•22 views

CVE-2023-51588 Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower Pro. An attacker must first obtain the ability to execute...

7.8CVSS8AI score0.00234EPSS
SaveExploits0References1
Rows per page
Query Builder