Lucene search
+L

17250 matches found

Positive Technologies
Positive Technologies
added 2023/09/20 12:00 a.m.11 views

PT-2023-28639 · Frauscher Sensortechnik Gmbh · Fds101

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all previous versions Description: The issue is related to a SQL injection vulnerability that can be exploited via manipulated parameters of the web interface without...

5.3CVSS5.4AI score0.00384EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/09/20 12:00 a.m.14 views

PT-2023-28635 · Frauscher Sensortechnik Gmbh · Fds101

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all previous versions Description: The issue is a remote code execution RCE vulnerability that can be exploited via manipulated parameters of the web interface without...

9.8CVSS9.5AI score0.01003EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/09/20 12:00 a.m.15 views

PT-2023-27962 · Frauscher Sensortechnik Gmbh · Fds101

Name of the Vulnerable Software and Affected Versions: Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all previous versions Description: The issue allows a remote attacker to read all files on the filesystem of the FDS101 device by exploiting a path traversal vulnerability...

7.5CVSS7.4AI score0.00742EPSS
SaveExploits0References7
OSV
OSV
added 2023/09/19 10:15 a.m.4 views

CVE-2023-0773

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerabili...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/19 12:00 a.m.27 views

PT-2023-8872 · Uniview · Uniview Ip Camera

Name of the Vulnerable Software and Affected Versions: Uniview IP Camera affected versions not specified Description: The issue is related to identification and authentication failure at the web-based management interface of Uniview IP Camera. A remote attacker could exploit this by sending...

9.8CVSS9.5AI score0.01172EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2023/09/19 12:00 a.m.9 views

The vulnerability in the web interface of the ArubaOS operating system arises from the lack of protective measures for the website structure, allowing attackers to carry out XSS attacks.

The vulnerability in the ArubaOS operating system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

6.4CVSS6.3AI score0.00462EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/09/19 12:00 a.m.19 views

NVIDIA DGX Input Validation Error Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX H100 BMC suffers from an input validation error vulnerability that stems from an input validation error vulnerability in the Web UI. An attacker could exploit this vulnerability to cause code...

9.8CVSS6.8AI score0.00709EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/18 8:15 p.m.9 views

CVE-2023-40221

The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section MAIL SERVER where the information is displayed. Injection can be done on...

8.8CVSS5.8AI score0.00534EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/18 7:15 p.m.22 views

Hardcoded credentials

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

5.8CVSS9.4AI score0.00583EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/18 6:22 p.m.11 views

CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

6.3CVSS7.1AI score0.00583EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/18 6:22 p.m.24 views

CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

6.3CVSS9.7AI score0.00583EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/18 11:15 a.m.37 views

CVE-2023-34999

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

8.4CVSS8.8AI score0.01134EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/18 11:15 a.m.26 views

Command injection

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

5.8CVSS7.5AI score0.01134EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/18 10:16 a.m.12 views

CVE-2023-34999

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

8.4CVSS8.1AI score0.01134EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/18 10:16 a.m.28 views

CVE-2023-34999

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

8.4CVSS8.9AI score0.01134EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/18 12:00 a.m.10 views

Juplink RX4-1500 Trust Management Issue Vulnerability

The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 versions V1.0.2 through V1.0.5, which stems from the use of hard-coded credentials, which allows an attacker to log in to the web interface or Telnet service as the user user...

9.8CVSS6.8AI score0.00583EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:00 a.m.16 views

The vulnerability of the LuCI interface in the embedded operating system OpenWrt, which allows a hacker to perform XSS attacks.

The vulnerability of the LuCI interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.1CVSS6.2AI score0.00581EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:00 a.m.11 views

The vulnerability of the LuCI web interface in the embedded operating system OpenWrt allows attackers to perform cross-site scripting attacks.

The vulnerability of the LuCI web interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00505EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/16 12:00 a.m.17 views

The vulnerability in the web interface of the LuCI, a built-in operating system called OpenWrt, allows attackers to execute cross-site scripting attacks.

The vulnerability in the LuCI web interface of the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00551EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/14 12:00 a.m.15 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36754)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

9.1CVSS7.9AI score0.01535EPSS
SaveExploits0References3
Rows per page
Query Builder