Lucene search
+L

19877 matches found

RedhatCVE
RedhatCVE
•added 2025/08/24 12:13 a.m.•21 views

CVE-2022-43110

Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password,...

9.8CVSS7.7AI score0.0066EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/24 12:13 a.m.•14 views

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

10CVSS8AI score0.00798EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2014-4722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or...

4.3CVSS5.9AI score0.02347EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2017-7557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack. CVE-2017-7557 Note that Nessus relies o...

8.8CVSS7.9AI score0.00838EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2016-10026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI...

7.5CVSS7.3AI score0.02129EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/23 8:13 p.m.•20 views

CVE-2010-20113

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When processing a GET request to list.html, the server fails to properly validate the length of the path parameter. Supplying an excessively long value causes a buffer overflow on the...

9.8CVSS7.9AI score0.02317EPSS
SaveExploits2References1
NVD
NVD
•added 2025/08/22 8:15 p.m.•18 views

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

10CVSS0.00798EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/08/22 4:35 p.m.•19 views

CVE-2010-20059

FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The execraw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation...

9.3CVSS7.2AI score0.01524EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/08/22 4:35 p.m.•20 views

CVE-2025-20269

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerabili...

6.5CVSS7.3AI score0.00426EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/22 7:36 a.m.•19 views

CVE-2025-9225

Stored cross-site scripting XSS in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser...

5.5CVSS6.1AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/22 2:40 a.m.•35 views

CVE-2025-41452 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

6.8CVSS0.00714EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/22 2:40 a.m.•58 views

CVE-2025-41452

Danfoss AK-SM8xxA Series before 4.3.1 contains a post-authenticated external control of the system Web interface configuration, with improper handling of exceptional conditions that could cause a DoS. CVSS 6.8 (Network, high attack complexity, high impact on availability). Remediation: update to ...

6.8CVSS7.2AI score0.00714EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/08/22 12:00 a.m.•8 views

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

7.9AI score0.00798EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•29 views

PT-2025-34328

Name of the Vulnerable Software and Affected Versions: Danfoss AK-SM8xxA Series versions prior to 4.3.1 Description: A post-authenticated external control of system web interface configuration setting issue exists. This could allow for a denial of service attack due to improper handling of...

6.8CVSS7.3AI score0.00714EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•11 views

CVE-2025-41452: External Control of System or Configuration Setting

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

6.8CVSS5.8AI score0.00714EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/22 12:00 a.m.•33 views

CVE-2022-43110

Voltronic Power ViewPower (versions 1.04-21353 and earlier) and PowerShield Netguard (before 1.04-23292) are vulnerable to an improper access control flaw (CWE-425 , CWE-306 , CWE-284 ). An unauthenticated remote attacker can exploit an unspecified web interface to perform unauthorized actions, i...

9.8CVSS7.1AI score0.0066EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/22 12:00 a.m.•29 views

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

0.00798EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/08/22 12:00 a.m.•28 views

CVE-2022-43110

Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password,...

0.0066EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/22 12:00 a.m.•51 views

CVE-2022-31491

Voltronic Power and PowerShield New Zealand products, specifically ViewPower through 1.04-24215 , ViewPower Pro through 2.0-22165 , and PowerShield Netguard before 1.04-23292 , are vulnerable to remote code execution. The flaw exists in a critical underlying function exposed over the network (CWE...

10CVSS7.3AI score0.00798EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•17 views

Voltronic Power ViewPower and PowerShield NetGuard security vulnerabilities

Voltronic Power ViewPower is a monitoring and management software for solar inverters from Voltronic Power.PowerShield NetGuard is an uninterruptible power supply management software from PowerShield New Zealand. A security vulnerability exists in Voltronic Power ViewPower versions 1.04-21353 and...

9.8CVSS6.8AI score0.0066EPSS
SaveExploits0References3
Rows per page
Query Builder