CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

17251 matches found

Tenable Nessus•added 2023/09/14 12:00 a.m.•31 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36751)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•15 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36754)

9.1CVSS7.9AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36752)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Cross-Site Request Forgery (CVE-2022-29561)

8.8CVSS8.1AI score0.00276EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36753)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36750)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•25 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36389)

8.8CVSS6.7AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•21 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36755)

9.1CVSS8.1AI score0.00972EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•17 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36390)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36386)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

BDU FSTEC•added 2023/09/13 12:00 a.m.•11 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W allows a hacker to execute arbitrary code.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.00773EPSS

SaveExploits0References2

BDU FSTEC•added 2023/09/13 12:00 a.m.•11 views

The vulnerability in the web interface of the data storage system for deploying Cisco HyperFlex hyper-converged infrastructure allows a attacker to redirect users to any arbitrary URL address.

The vulnerability of the web interface of the data storage system for deploying Cisco HyperFlex hyper-converged infrastructure is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

10CVSS7.1AI score0.00484EPSS

SaveExploits0References3

CNVD•added 2023/09/13 12:00 a.m.•15 views

Damon Enterprise Manager (DEM) suffers from a logic flaw vulnerability (CNVD-2023-78062)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A logic flaw vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to delete arbitrary files...

7.1AI score

SaveExploits0

Cvelist•added 2023/09/08 2:52 a.m.•54 views

CVE-2014-5329

GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...

7.7AI score0.01652EPSS

SaveExploits2References1

Positive Technologies•added 2023/09/08 12:00 a.m.•8 views

PT-2023-12696 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 5.0.5 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

5.4CVSS5.5AI score0.00365EPSS

SaveExploits0References6

CNNVD•added 2023/09/08 12:00 a.m.•9 views

Socomec MODULYS GP Security Vulnerability

The Socomec MODULYS GP is a green power device from Socomec France. A security vulnerability exists in the Socomec MODULYS GP that stems from a lack of security in the authentication process, where information can be obtained by sending a number of requests in the web application of a vulnerable...

7.5CVSS6.8AI score0.00508EPSS

SaveExploits0References4

Prion•added 2023/09/07 4:15 p.m.•42 views

Memory corruption

The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed ...

5CVSS7.8AI score0.01704EPSS

SaveExploits2References1Affected Software1

Vulnrichment•added 2023/09/07 3:43 p.m.•26 views

CVE-2023-30800 MikroTik RouterOS Web Interface Heap Corruption

7.5CVSS7.5AI score0.01704EPSS

SaveExploits2References1

Cvelist•added 2023/09/07 3:43 p.m.•37 views

CVE-2023-30800 MikroTik RouterOS Web Interface Heap Corruption

7.5CVSS8AI score0.01704EPSS

SaveExploits2References1

BDU FSTEC•added 2023/09/07 12:00 a.m.•15 views

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to execute arbitrary code.

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability allows a attacker to execute arbitrary code using the runshellscript.py script...

7.8CVSS8.1AI score0.00216EPSS

SaveExploits0References4Affected Software2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by