Lucene search
+L

8888 matches found

Vulnrichment
Vulnrichment
added 2023/10/01 4:31 a.m.16 views

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

5.8CVSS8.8AI score0.16748EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/10/01 4:31 a.m.45 views

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

5.8CVSS9AI score0.16748EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:00 a.m.9 views

Atlassian JIRA SEoL (7.3.x)

According to its version, Atlassian JIRA is 7.3.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/29 12:00 a.m.17 views

PT-2023-28273 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7.2AI score0.00391EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:00 a.m.16 views

Tenable Nessus SEoL (8.14.x)

According to its version, Tenable Nessus is 8.14.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:00 a.m.4 views

Atlassian JIRA SEoL (5.2.x)

According to its version, Atlassian JIRA is 5.2.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

5.5AI score
SaveExploits0References1
CNVD
CNVD
added 2023/09/28 12:00 a.m.11 views

Tenda AC10U setSchedWifi function stack buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow...

9.8CVSS9.5AI score0.00649EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 4:21 p.m.13 views

CVE-2023-43125

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.2CVSS5.8AI score0.00237EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 4:21 p.m.12 views

CVE-2023-43124

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.1CVSS5.8AI score0.00154EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/27 4:21 p.m.24 views

Code injection

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

4.8CVSS6.9AI score0.00154EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2023/09/27 3:19 p.m.10 views

CVE-2023-44015

Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function...

9.8CVSS5.9AI score0.00649EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:00 a.m.24 views

F5 Networks BIG-IP : BIG-IP APM Clients TunnelCrack vulnerability (K000136909)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.3 / 16.1.4.2 / 17.1.1.1. It is, therefore, affected by a vulnerability as referenced in the K000136909 advisory. BIG-IP APM clients may send IP traffic outside of the VPN tunnel.CVE-2023-43125 Tenable has extracted...

8.2CVSS7.8AI score0.00237EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/09/26 12:00 a.m.44 views

Yunnan ChainDrop Technology Co., Ltd.'s Siyuan Notes Software Web Application Has XSS Vulnerability

SiYuan Notes Software Web App is a privacy-first personal knowledge management system that supports full offline use as well as end-to-end encrypted synchronization. Yunnan ChainDrop Technology Co., Ltd. has an XSS vulnerability in the Siyuan Notes Software Web application, which can be exploited...

5.8AI score
SaveExploits0
NVD
NVD
added 2023/09/25 3:15 a.m.29 views

CVE-2023-5153

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.7AI score0.01675EPSS
SaveExploits1References4
OSV
OSV
added 2023/09/25 3:15 a.m.19 views

CVE-2023-5154

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

8.8CVSS5.5AI score0.15082EPSS
SaveExploits0References4
OSV
OSV
added 2023/09/25 3:15 a.m.12 views

CVE-2023-5153

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.5AI score0.01675EPSS
SaveExploits1References4
Prion
Prion
added 2023/09/25 3:15 a.m.28 views

Out-of-bounds

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

6.5CVSS8.8AI score0.15082EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/25 3:00 a.m.20 views

CVE-2023-5154 D-Link DAR-8000 changelogo.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

6.5CVSS7.1AI score0.15082EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/09/25 3:00 a.m.30 views

CVE-2023-5154 D-Link DAR-8000 changelogo.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

6.5CVSS9AI score0.15082EPSS
SaveExploits0References4
CVE
CVE
added 2023/09/25 2:31 a.m.152 views

CVE-2023-5153

CVE-2023-5153 concerns the D-Link DAR-8000, affected up to 20151231. The vulnerability targets an unknown part of the file /Tool/querysql.php, enabling an SQL injection that can be triggered remotely. Public exploits and disclosures exist. Multiple sources confirm the product is End-of-Life and n...

6.5CVSS6.7AI score0.01675EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder