CVE-2021-37374

Cross Site Scripting XSS vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...

CVE-2021-37376

Teradek Bond family (Bond, Bond 2, Bond Pro) firmware 7.3.x and earlier is affected by a Cross Site Scripting (XSS) issue in the Friendly Name field of System Information Settings that could allow remote code execution. Root cause details are not provided beyond the vulnerable field, and multiple...

CVE-2021-37374

The CVE-2021-37374 issue affects Teradek Clip firmware (all versions) where a Cross Site Scripting (XSS) vulnerability exists in the Friendly Name field within System Information Settings. The root cause is improper handling of input in the Friendly Name field, allowing remote attackers to run ar...

PT-2023-12315 · Teradek · Teradek Cube Pro +1

Name of the Vulnerable Software and Affected Versions: Teradek Cube and Cube Pro versions 7.3.x and earlier Description: The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a result of a Cross Site Scripting XSS vulnerability...

CLSA-2023-1675373662 vim: Fix of CVE-2023-0433

CVE-2023-0433: check for not going over the end of the line...

vim: Fix of CVE-2023-0433

CVE-2023-0433: check for not going over the end of the line...

CLSA-2023-1675373517 vim: Fix of CVE-2023-0433

CVE-2023-0433: check for not going over the end of the line...

CLSA-2023-1675372413 Fix CVE(s): CVE-2023-0433

SECURITY UPDATE: Reading past the end of a line when formatting text - debian/patches/CVE-2023-0433: Check for not going over the end of the line - CVE-2023-0433...

Cross-Site Scripting (XSS)

microweber/microweber is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on victim's browser...

Microsoft Windows 10 Version 21H2 Unsupported Version Detection

Microsoft Windows 10 version 21H2 is running on the remote host. Microsoft ended support for Windows 10 version 21H2 on June 13, 2023. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...

CVE-2023-22422

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to...

CVE-2023-22839

On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests...

CVE-2023-22323

In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. Note: Software...

Code injection

On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests...

CVE-2023-22842 BIG-IP SIP profile vulnerability

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software...

CVE-2023-22657 F5OS vulnerability

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22657 F5OS vulnerability

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22358 BIG-IP Edge Client for Windows vulnerability

In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22340 BIG-IP SIP profile vulnerability

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technic...

PT-2023-15463 · Comfast · Comfast Cf-Wr623N Router

Name of the Vulnerable Software and Affected Versions: COMFAST CF-WR623N Router firmware versions V2.3.0.1 and before Description: The issue is related to Incorrect Access Control, where improper authentication allows requests to be made to back-end scripts without a valid session or...