10615 matches found
CVE-2023-51643 Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability
Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...
CVE-2023-51642
CVE-2023-51642 involves Allegra’s loadFieldMatch deserialization, where untrusted data is deserialized due to improper input validation. This leads to remote code execution in the LOCAL SERVICE context. Attack requires authentication, but Allegra’s registration mechanism can create a user with su...
CVE-2023-51641 Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability
Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...
CVE-2023-51641
CVE-2023-51641 affects Allegra’s renderFieldMatch, where deserialization of untrusted data can allow remote code execution. The flaw arises from insufficient validation of user-supplied data, enabling code execution in the context of LOCAL SERVICE. Authentication is required, but Allegra’s regist...
CVE-2023-51641 Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability
Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...
CVE-2023-51640 Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability
Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism ca...
CVE-2023-51640 Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability
Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism ca...
CVE-2023-51640
CVE-2023-51640 – Allegra : A vulnerability in the extarctZippedFile method enables directory traversal leading to remote code execution. The flaw stems from inadequate validation of a user-supplied path used in file operations, allowing code execution with LOCAL SERVICE privileges. Authentication...
CVE-2023-51639 Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability
Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2023-51639 Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability
Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2023-51638 Allegra Hard-coded Credentials Authentication Bypass Vulnerability
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...
CVE-2023-51635
The CVE-2023-51635 issue affects NETGEAR RAX30 routers, specifically the fing_dil service. It is a stack-based buffer overflow caused by inadequate validation of the length of user-supplied data before copying to a fixed-length buffer. This allows network-adjacent attackers to execute arbitrary c...
CVE-2023-51634
CVE-2023-51634 affects NETGEAR RAX30 routers. The vulnerability lies in the HTTPS file-download path, where server certificate validation is improperly performed, allowing network-adjacent attackers to exploit it without authentication and execute arbitrary code with root privileges. Documented i...
CVE-2023-51634 NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this...
EUVD-2023-43193
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...
CVE-2023-39470
CVE-2023-39470 concerns PaperCut NG, where the vulnerability lies in the management of the print.script.sandboxed setting. The exposed dangerous function can let an attacker execute code with SYSTEM privileges after authenticating, resulting in remote code execution. Affected product: PaperCut NG...
CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...
CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists with...
