Lucene search
+L

2845 matches found

CNNVD
CNNVD
added 2023/10/10 12:0 a.m.8 views

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet. A security vulnerability exists in Fortinet FortiWLM that stems from the presence of an operating system command injection vulnerability. The vulnerability allows an attacker to execute unauthorized code or commands via specially crafted http...

9.8CVSS7.9AI score0.18148EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.6 views

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet. A security vulnerability exists in Fortinet FortiWLM that stems from the presence of an operating system command injection vulnerability. The vulnerability allows an attacker to execute unauthorized code or commands via specially crafted http...

9.8CVSS7.9AI score0.02108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.6 views

PT-2023-8719 · Fortinet · Fortimanager

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 6.2.0 through 6.2.11 Fortinet FortiManager versions 6.4.0 through 6.4.12 Fortinet FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiManager version 7.4.0...

10CVSS8AI score0.04184EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.7 views

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet. A security vulnerability exists in Fortinet FortiWLM that stems from the presence of an operating system command injection vulnerability. The vulnerability allows an attacker to execute unauthorized code or commands via specially crafted http...

8.8CVSS7.9AI score0.02087EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.7 views

PT-2023-6018 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.5.0 through 8.5.4 Fortinet FortiWLM versions 8.6.0 through 8.6.5 Description: The issue is related to an improper neutralization of special elements used in an OS command, also known as 'OS command injection'. Thi...

9.8CVSS9.6AI score0.02108EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.6 views

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet. A security vulnerability exists in Fortinet FortiWLM that stems from the presence of an operating system command injection vulnerability. The vulnerability allows an attacker to execute unauthorized code or commands via specially crafted http...

8.8CVSS7.9AI score0.02087EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.5 views

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet. A security vulnerability exists in Fortinet FortiWLM that stems from the presence of an operating system command injection vulnerability. The vulnerability allows an attacker to execute unauthorized code or commands via specially crafted http...

9.8CVSS7.9AI score0.02108EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.7 views

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from insufficient control flow management of the device, which allows an attacker to enable hidden functionality via an HTTP request...

5.3CVSS6.8AI score0.00574EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.9 views

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that originates from a vulnerability that allows an attacker to change the path to a file using an HTTP request so that the site fails to load the necessary strings...

6.5CVSS6.7AI score0.00646EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/10/07 12:0 a.m.68 views

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2023-75343)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. The Mozilla Firefox memory misreference vulnerability can be exploited by a remote attacker to submit a special Web request that induces the user to parse it, which can crash the application...

9.8CVSS6.6AI score0.00812EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/07 12:0 a.m.59 views

Mozilla Firefox Process Created Twice Release Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox process creation suffers from a two-release vulnerability, which can be exploited by a remote attacker to submit a special Web request, tricking the user into parsing it, which can caus...

9.8CVSS9.1AI score0.0099EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/07 12:0 a.m.25 views

mojoPortal File Upload Vulnerability

mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...

9.8CVSS9.7AI score0.01285EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/10/07 12:0 a.m.25 views

Mozilla Firefox Memory Corruption Vulnerability (CNVD-2023-74540)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a memory corruption vulnerability that can be exploited by a remote attacker to submit a special Web request that can be tricked into being parsed by the user, which can...

9.8CVSS7.7AI score0.01233EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/06 11:15 p.m.7 views

CVE-2023-44860

An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request...

7.5CVSS5.8AI score0.19514EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/06 12:0 a.m.8 views

NETIS SYSTEMS N3 Security Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS N3Mv2-V1.0.1.865 version that originates from a vulnerability that allows an attacker to cause a denial of service DoS via the authorization component of an HTTP request...

7.5CVSS6.6AI score0.19514EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/04 12:15 p.m.7 views

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

7.8CVSS5.8AI score0.00151EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/10/04 12:15 p.m.2 views

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

8.1CVSS7.1AI score0.00151EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/04 12:15 p.m.35 views

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

8.1CVSS8AI score0.00151EPSS
SaveExploits0References2
Prion
Prion
added 2023/10/04 12:15 p.m.19 views

Design/Logic Flaw

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

4.3CVSS7.5AI score0.00151EPSS
SaveExploits0References2Affected Software6
Cvelist
Cvelist
added 2023/10/04 12:0 a.m.36 views

CVE-2023-22618

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...

8.1CVSS8.2AI score0.00151EPSS
SaveExploits0References2
Rows per page
Query Builder