830 matches found
CVE-2022-45611
CVE-2022-45611 affects Fresenius Kabi PharmaHelp 5.1.759.0. The issue allows attackers to gain escalated privileges via capture of user login information, indicating an information disclosure that enables privilege escalation. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a ba...
CVE-2023-39405
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...
Design/Logic Flaw
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...
CVE-2023-39405
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...
CVE-2023-39405
CVE-2023-39405 is described as an out-of-bounds parameter read/write vulnerability in the Wi‑Fi module of Huawei HarmonyOS. The issue, when exploited, may allow escalation of privileges and cause other apps to be executed with higher privileges. The provided documents identify the affected platfo...
Improper Authorization
monit is vulnerable to Improper Authorization. This vulnerability occurs due to the improper PAM-authorization, resulting in remote malicious attackers gaining escalated privileges...
CVE-2023-36089
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36090
Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36091
Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Authentication flaw
UNSUPPORTED WHEN ASSIGNED Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Authentication flaw
UNSUPPORTED WHEN ASSIGNED Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36089
CVE-2023-36089 concerns a remote authentication bypass in D-Link DIR-645, firmware 1.03, via the phpcgi_main function in cgibin. The Red Hat/NVD entries describe an attacker gaining escalated privileges without user interaction. The issue is tied to products that are no longer supported, and no o...
CVE-2023-36091
The CVE-2023-36091 entry concerns D-Link DIR-895 router firmware FW102b07, where the phpcgi_main function in cgibin suffers an authentication bypass that allows remote attackers to escalate privileges. Multiple sources corroborate a remote-network-attack scenario with a high-severity impact (C/H/...
CVE-2023-36091
Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36090
Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36092
Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36090
CVE-2023-36090 describes an Authentication Bypass in the D-Link DIR-885L (FW102b01) where lack of valid authentication in phpcgi allows remote attackers to escalate privileges. Affected product: D-Link DIR-885L; vulnerability type: authentication bypass via phpcgi; impact: remote, unauthenticated...
CVE-2023-36089
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36089
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2023-36090
Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...