CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

17457 matches found

BDU FSTEC•added 2023/09/16 12:00 a.m.•17 views

The vulnerability of the LuCI interface in the embedded operating system OpenWrt, which allows a hacker to perform XSS attacks.

The vulnerability of the LuCI interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.1CVSS6.2AI score0.00581EPSS

SaveExploits0References3Affected Software1

BDU FSTEC•added 2023/09/16 12:00 a.m.•14 views

The vulnerability of the LuCI web interface in the embedded operating system OpenWrt allows attackers to perform cross-site scripting attacks.

The vulnerability of the LuCI web interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.0051EPSS

SaveExploits0References4Affected Software1

BDU FSTEC•added 2023/09/16 12:00 a.m.•21 views

The vulnerability in the web interface of the LuCI, a built-in operating system called OpenWrt, allows attackers to execute cross-site scripting attacks.

The vulnerability in the LuCI web interface of the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00551EPSS

SaveExploits1References4Affected Software1

Tenable Nessus•added 2023/09/14 12:00 a.m.•31 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36751)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36753)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•23 views

Siemens RUGGEDCOM ROX Cross-Site Request Forgery (CVE-2022-29561)

8.8CVSS8.1AI score0.00276EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36752)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•15 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36754)

9.1CVSS7.9AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36389)

8.8CVSS6.7AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•17 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36390)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36755)

9.1CVSS8.1AI score0.00972EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36750)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•23 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36386)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

BDU FSTEC•added 2023/09/13 12:00 a.m.•12 views

The vulnerability in the web interface of the data storage system for deploying Cisco HyperFlex hyper-converged infrastructure allows a attacker to redirect users to any arbitrary URL address.

The vulnerability of the web interface of the data storage system for deploying Cisco HyperFlex hyper-converged infrastructure is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

10CVSS7.1AI score0.00584EPSS

SaveExploits0References3

BDU FSTEC•added 2023/09/13 12:00 a.m.•13 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W allows a hacker to execute arbitrary code.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.0095EPSS

SaveExploits0References2

CNVD•added 2023/09/13 12:00 a.m.•18 views

Damon Enterprise Manager (DEM) suffers from a logic flaw vulnerability (CNVD-2023-78062)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A logic flaw vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to delete arbitrary files...

7.1AI score

SaveExploits0

Cvelist•added 2023/09/08 2:52 a.m.•58 views

CVE-2014-5329

GIGAPOD file servers Appliance model and Software model provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a flaw in handling HTTP requests CVE-2011-3192, which may lead to ...

7.7AI score0.03415EPSS

SaveExploits2References1

Positive Technologies•added 2023/09/08 12:00 a.m.•12 views

PT-2023-12696 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 5.0.5 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

5.4CVSS5.5AI score0.00365EPSS

SaveExploits0References6

CNNVD•added 2023/09/08 12:00 a.m.•11 views

Socomec MODULYS GP Security Vulnerability

The Socomec MODULYS GP is a green power device from Socomec France. A security vulnerability exists in the Socomec MODULYS GP that stems from a lack of security in the authentication process, where information can be obtained by sending a number of requests in the web application of a vulnerable...

7.5CVSS6.8AI score0.00634EPSS

SaveExploits0References4

Prion•added 2023/09/07 4:15 p.m.•44 views

Memory corruption

The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed ...

5CVSS7.8AI score0.01687EPSS

SaveExploits2References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by