CVE-2023-51629

The CVE-2023-51629 entry concerns the D-Link DCS-8300LHV2 ONVIF API, where a hardcoded PIN in the configuration enables authentication bypass. The vulnerability affects the DCS-8300LHV2 IP camera and allows network-adjacent attackers to bypass authentication without user interaction. The issue is...

CVE-2023-51626

The CVE-2023-51626 entry pertains to D-Link DCS-8300LHV2 and an RTSP server flaw in the Authorization header handling, causing a stack-based buffer overflow that can enable remote code execution with root privileges. Multiple connected sources (NVD/NVF, ZDI advisory ZDI-24-046) corroborate that t...

CVE-2023-51624

CVE-2023-51624 affects D-Link DCS-8300LHV2 IP cameras. The vulnerability lies in the RTSP server’s handling of the Authorization header, where improper validation of user-supplied data length before copying it into a fixed-size, stack-based buffer can lead to a stack-based overflow and remote cod...

CVE-2023-51622

The CVE-2023-51622 affects D-Link DIR-X3260 routers, specifically the prog.cgi handling HNAP requests in the lighttpd webserver on ports 80/443. The flaw is a stack-based buffer overflow due to improper validation of a user-supplied string copied into a fixed-size stack buffer, allowing network-a...

CVE-2023-51617

CVE-2023-51617 affects the D-Link DIR-X3260 router, specifically the prog.cgi SetWanSettings handler. The flaw is a stack-based buffer overflow in the lighttpd/HNAP flow where an unchecked user string is copied into a fixed-length stack buffer, enabling code execution with root privileges. Attack...

CVE-2023-51616

Affected product: D-Link DIR-X3260. Vulnerable component: prog.cgi (SetSysEmailSettings) handling HNAP requests over lighttpd on ports 80/443. Root-cause: stack-based buffer overflow due to inadequate validation of a user-supplied string copied to a fixed-length buffer. Impact: remote code execut...

CVE-2023-51615

The CVE-2023-51615 issue affects D-Link DIR-X3260 routers and is caused by a stack-based buffer overflow in the prog.cgi binary that handles HNAP requests for the lighttpd webserver on ports 80/443. A malformed user-supplied string is copied into a fixed-length stack buffer, allowing a network-ad...

CVE-2023-51613

CVE-2023-51613 affects the D-Link DIR-X3260 router, specifically the prog.cgi SetDynamicDNSSettings handler. The root cause is a stack-based buffer overflow in the HNAP path processed by lighttpd on ports 80/443 due to insufficient input validation of a user-supplied string. This allows network-a...

CVE-2023-51609

CVE-2023-51609 affects Kofax Power PDF, due to a JP2 file parsing out-of-bounds read. The flaw arises from insufficient validation of user-supplied data in JP2 parsing, enabling information disclosure and potentially arbitrary code execution in the target process. Exploitation requires user inter...

CVE-2023-51607

CVE-2023-51607 affects Kofax Power PDF and relates to a PNG file parsing flaw that can cause an out-of-bounds read, leading to information disclosure. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file) and, per NVD, could be combined with other fla...

CVE-2023-51602

CVE-2023-51602 pertains to Honeywell Saia PG5 Controls Suite and describes an XML External Entity (XXE) processing vulnerability in the XML parser. The flaw allows a remote attacker to disclose sensitive information by supplying a crafted XML document that references an external URI, which the pa...

CVE-2023-51603

The CVE-2023-51603 issue affects Honeywell Saia PG5 Controls Suite, stemming from a CAB file parsing vulnerability. The root cause is insufficient validation of a user-supplied path before using it in file operations, enabling directory traversal. Impacted component: CAB parsing logic in the cont...

CVE-2023-51597

CVE-2023-51597 affects Kofax Power PDF, with the flaw in the U3D file parsing path. The issue is an out-of-bounds write caused by improper validation of user-supplied data, which can allow remote code execution in the context of the current process. Exploitation requires user interaction (visitin...

CVE-2023-51596

CVE-2023-51596 refers to a heap-based buffer overflow in BlueZ’s Phone Book Access Profile that can lead to remote code execution with root privileges after a device connection to a malicious Bluetooth device. The flaw arises from improper validation of user-supplied data length before copying in...

CVE-2023-51594

CVE-2023-51594 affects BlueZ OBEX library. The vulnerability stems from improper validation of OBEX protocol parameters, causing an out-of-bounds read and information disclosure in BlueZ. Exploitation requires a network-adjacent attacker who must have the target connect to a malicious Bluetooth d...

CVE-2023-51595

Vulnerability (CVE-2023-51595) : Voltronic Power ViewPower Pro is affected by a SQL injection in the selectDeviceListBy method. The flaw stems from insufficient validation of a user-supplied string used to build SQL queries, allowing an attacker to execute arbitrary code in the context of LOCAL S...

CVE-2023-51593

Voltronic Power ViewPower Pro is affected by a remote code execution due to a Struts2 expression language injection flaw. The vulnerability allows unauthenticated attackers to execute arbitrary code in the context of LOCAL SERVICE. Root cause: a vulnerable expression language handling in a Struts...

CVE-2023-51590

CVE-2023-51590 affects Voltronic Power ViewPower Pro. The vulnerability is an unrestricted file upload in the UpLoadAction class, caused by insufficient validation of user-supplied data. This allows remote attackers to upload arbitrary files and execute code with LOCAL SERVICE privileges, without...

CVE-2023-51588

CVE-2023-51588 involves Voltronic Power ViewPower Pro with a MySQL configuration flaw caused by hard-coded credentials. The vulnerability enables local privilege escalation, allowing an attacker who can run low-privileged code to escalate to SYSTEM and execute arbitrary code within that context. ...

CVE-2023-51586

Voltronic Power ViewPower Pro is affected by a SQL injection in the selectEventConfig method, allowing remote code execution with no authentication. The flaw arises from unsafely using a user-supplied string to construct SQL queries, enabling code execution in the context of LOCAL SERVICE. Docume...