CVE-2023-0425 Buffer overflow in global memory region

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

CVE-2023-0425 Buffer overflow in global memory region

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

CVE-2023-38935

CVE-2023-38935 affects multiple Tenda models (AC1206, AC8, AC5, AC10, AC9) with versions listed in the initial entry. A stack overflow via the list parameter in the formSetQosBand function is reported across sources; the CVSSv3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privile...

CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function...

CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

Furukawa Electric 423-41W/AC 安全漏洞

The Furukawa Electric 423-41W/AC is a wireless router from Furukawa Electric Japan. A security vulnerability exists in the Furukawa Electric 423-41W/AC v1.1.4 prior and LD421-21W v1.3.3 prior, which stems from the presence of a Remote Command Execution RCE vulnerability that could allow an...

PT-2023-12317 · Furukawa · Furukawa Ld421-21W +2

Name of the Vulnerable Software and Affected Versions: Furukawa ONU models affected versions not specified Furukawa 423-41W/AC versions prior to 1.1.4 Furukawa LD421-21W versions prior to 1.3.3 Description: A Remote Code Execution RCE vulnerability was found, allowing remote unauthenticated users...

ibm.rmutl.ac.th Cross Site Scripting vulnerability OBB-3517184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-3678

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deleteinquiry of the component HTTP POST Request Handler. The manipulation of the argument ...

CVE-2023-3678

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deleteinquiry of the component HTTP POST Request Handler. The manipulation of the argument ...

CVE-2023-3678

CVE-2023-3678 affects SourceCodester AC Repair and Services System 1.0. The vulnerability resides in the HTTP POST Request Handler at /classes/Master.php?f=delete_inquiry where the id argument is manipulated to yield an SQL injection. Descriptions consistently state remote exploitation and a crit...

CVE-2023-3661

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

Sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

CVE-2023-3661 SourceCodester AC Repair and Services System sql injection

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

CVE-2023-3659

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manageuser. The manipulation of the argument firstname/middlename leads to cross site scripting...

CVE-2023-3659

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manageuser. The manipulation of the argument firstname/middlename leads to cross site scripting...

CVE-2023-3658

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=deletebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...

Cross site scripting

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manageuser. The manipulation of the argument firstname/middlename leads to cross site scripting...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=deletebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-3659 SourceCodester AC Repair and Services System cross site scripting

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manageuser. The manipulation of the argument firstname/middlename leads to cross site scripting...