15132 matches found
CVE-2021-40698
ColdFusion version 2021 update 1 and earlier and versions 2018.10 and earlier are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on...
Security feature bypass
ColdFusion version 2021 update 1 and earlier and versions 2018.10 and earlier are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass??. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on...
CVE-2021-40698 ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass
ColdFusion version 2021 update 1 and earlier and versions 2018.10 and earlier are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on...
CVE-2021-40698 ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass
ColdFusion version 2021 update 1 and earlier and versions 2018.10 and earlier are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on...
PT-2023-5296 · Unknown · Mod3Gp-Sy-120K
Name of the Vulnerable Software and Affected Versions: MOD3GP-SY-120K affected versions not specified Description: The web application of MOD3GP-SY-120K contains a persistent cross-site scripting XSS issue. This allows an authenticated remote attacker to inject an XSS payload into the MAIL RCV...
CVE-2021-36036
Magento versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper access control vulnerability within Magento's Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privile...
CVE-2023-40531
Archer AX6000 firmware versions prior to 'Archer AX6000JPV11.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-38588
Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-38588
Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-40193
Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-39935
Archer C5400 firmware versions prior to 'Archer C5400JPV2230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
Design/Logic Flaw
Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
Design/Logic Flaw
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50JPV1230529', Archer A10 firmware versions prior to 'Archer A10JPV2230504', Archer AX10 firmware...
Design/Logic Flaw
Deco M4 firmware versions prior to 'Deco M4JPV21.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
Design/Logic Flaw
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50JPV3230505', Archer C55 firmware versions prior to 'Archer C55JPV1230506', and Archer C20 firmwar...
Design/Logic Flaw
Archer AX6000 firmware versions prior to 'Archer AX6000JPV11.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-38588
Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
CVE-2023-39224
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...
CVE-2023-39224
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7JPV2230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided...