Lucene search
+L

1615 matches found

CVE
CVE
added 2023/08/28 3:31 a.m.53 views

CVE-2016-15035

Doc2k RE-Chat 1.0 contains a cross-site scripting vulnerability in an unknown portion of the JavaScript file js_on_radio-emergency.de_/re_chat.js. Exploitation can be performed remotely, implying potential user interaction is not required for initial access, with impact limited to confidentiality...

6.1CVSS4.8AI score0.00484EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/08/28 3:31 a.m.28 views

CVE-2016-15035 Doc2k RE-Chat re_chat.js cross site scripting

A vulnerability was found in Doc2k RE-Chat 1.0. It has been classified as problematic. This affects an unknown part of the file jsonradio-emergency.de/rechat.js. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named...

4CVSS6AI score0.00484EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/28 12:00 a.m.9 views

RE-Chat 跨站脚本漏洞

RE-Chat is the Chat module for radio-emergency.de. A cross-site scripting vulnerability exists in Doc2k RE-Chat version 1.0, which stems from the presence of an unknown function in jsonradio-emergency.de/rechat.js that results in cross-site scripting...

6.1CVSS4.2AI score0.00484EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/27 12:00 a.m.11 views

PT-2023-10354 · Unknown · Doc2K Re-Chat

Name of the Vulnerable Software and Affected Versions: Doc2k RE-Chat version 1.0 Description: A vulnerability was found in Doc2k RE-Chat, which has been classified as problematic. This affects an unknown part of the file js on radio-emergency.de /re chat.js. The manipulation leads to cross site...

6.1CVSS4.3AI score0.00484EPSS
SaveExploits0References10
Citrix
Citrix
added 2023/08/20 12:00 a.m.11 views

VDA 1912 - Black Screen on Session Re-connection with NVidia P1000 GPU

The setup consists of NVIDIA P1000 GPU The initial connection works fine but re-connecting to the session user only sees a black screen The Remote PC setup does not utilize a monitor, however, if a monitor is connected then the issue does not occur...

7.1AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/08/18 11:45 a.m.67 views

Exchange Server security updates updated

Microsoft has re-released the August 2023 Security Updates SUs for Exchange Server. The original release of the SUs, from August 8 2023, had a localization issue with Exchange Server running on a non-English Operating Systems OSes that caused Setup to stop unexpectedly, leaving Exchange services ...

7.5CVSS6.8AI score0.01983EPSS
SaveExploits0
NVD
NVD
added 2023/08/18 10:15 a.m.25 views

CVE-2023-39445

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

8.8CVSS8.9AI score0.00561EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/18 10:15 a.m.31 views

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

8CVSS8.1AI score0.00432EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/18 10:15 a.m.27 views

Design/Logic Flaw

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

5.8CVSS8.9AI score0.00561EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/18 10:15 a.m.28 views

Design/Logic Flaw

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

5.2CVSS8AI score0.00432EPSS
SaveExploits0References2
CVE
CVE
added 2023/08/18 9:40 a.m.72 views

CVE-2023-39445

The CVE-2023-39445 entry concerns ELECOM/LOGITEC LAN-WH300N/RE devices. A hidden functionality vulnerability allows an unauthenticated attacker to execute arbitrary code by delivering a specially crafted file to a management console. Affected platform: LAN-WH300N/RE (LOGITEC) across all versions....

8.8CVSS8.9AI score0.00561EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/18 9:40 a.m.16 views

CVE-2023-39445

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console...

8.1AI score0.00561EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/08/18 9:39 a.m.14 views

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

7.8AI score0.00432EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/08/18 9:39 a.m.35 views

CVE-2023-38576

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console...

8.2AI score0.00432EPSS
SaveExploits0References2
CVE
CVE
added 2023/08/18 9:39 a.m.56 views

CVE-2023-38576

CVE-2023-38576 relates to a hidden functionality vulnerability in the ELECOM/LOGITEC LAN-WH300N/RE management console. An authenticated user can execute arbitrary OS commands on the device. The incident is described across multiple sources, with the Red Hat entry and PT-Security summary confirmin...

8CVSS8AI score0.00432EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/18 12:00 a.m.15 views

PT-2023-26951 · Logitech · Lan-Wh300N/Re

Name of the Vulnerable Software and Affected Versions: LAN-WH300N/RE all versions provided by LOGITEC CORPORATION Description: A hidden functionality vulnerability allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management...

8.8CVSS8AI score0.00561EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/08/18 12:00 a.m.14 views

ELECOM LAN-WH300N/RE 安全漏洞

The ELECOM lan is a router from ELECOM Japan. A security vulnerability exists in the ELECOM LAN-WH300N/RE, which arises from the presence of an unknown feature in the device, that could allow an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to certain...

8.8CVSS8.4AI score0.00561EPSS
SaveExploits0References3
Oracle linux
Oracle linux
added 2023/08/10 12:00 a.m.103 views

curl security update

7.61.1-30.el88.3 - GSS delegation too eager connection re-use CVE-2023-27536 - fix host name wildcard checking CVE-2023-28321 - rebuild certs with 2048-bit RSA keys...

5.9CVSS7.1AI score0.01806EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2023/08/09 2:27 p.m.28 views

Vyper has incorrectly allocated named re-entrancy locks

Impact In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated incorrectly. Each function using a named re-entrancy lock gets a unique lock regardless of the key, allowing cross-function re-entrancy in contracts compiled with the susceptible versions. A specific set of...

9.1CVSS6.7AI score0.00821EPSS
SaveExploits1References8Affected Software1
Veracode
Veracode
added 2023/08/09 1:28 a.m.27 views

Incorrect Re-Entrancy Lock Allocation

vyper is vulnerable to Incorrect Re-Entrancy Lock Allocation. The allocation of named re-entrancy locks is flawed, which makes cross-function re-entrancy possible in contracts, because each function employing a named re-entrancy lock receives a distinct lock independent of the key under a specifi...

9.1CVSS6.8AI score0.00821EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder