EUVD-2023-39797

Malicious code in bioql PyPI...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

Buffer overflow

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2023-35803

CVE-2023-35803 affects Extreme Networks IQ Engine on AP devices (pre-10.6r2). The root cause is a buffer overflow in the ah_acsd service, which can be exploited by a remote attacker to achieve arbitrary code execution with root privileges, over the network (no user interaction required per ZDI ad...

CVE-2023-35803: Buffer Copy without Checking Size of Input

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

Buffer overflow

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit...

CVE-2023-35802

CVE-2023-35802 affects Extreme Networks IQ Engine prior to version 10.6r1 on Extreme Network AP devices. It is a Buffer Overflow in the CAPWAP protocol implementation that can allow an attacker with access to the internal management interface/subnet to obtain elevated privileges and perform remot...

CVE-2023-35802: Buffer Copy without Checking Size of Input

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48970)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48967)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48971)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48969)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co. Ltd (CNVD-2020-48968)

Extreme CMS is an open source and free PHPCMS web content management system. Ltd. Extreme CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...