1191 matches found
CVE-2023-34934
A stack overflow in the EditBasicSSID5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2023-33725
Broadleaf 5.x and 6.x including 5.2.25-GA and 6.2.6-GA was discovered to contain a cross-site scripting XSS vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA...
Triangle MicroWorks SCADA Data Gateway 安全漏洞
Triangle Microworks Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle Microworks, Inc. A security vulnerability exists in Triangle MicroWorks SCADA Data Gateway v5.01.03 and earlier versions, which originates from an unauthenticated attacker being able to send a...
CVE-2023-33509
KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...
CVE-2023-33509
KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...
CVE-2023-33508
KramerAV VIA GO² 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution RCE...
CVE-2023-33508
KramerAV VIA GO² 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution RCE...
CVE-2023-33507
KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...
CVE-2023-33507
KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...
CVE-2023-33507
KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...
CVE-2023-33508
KramerAV VIA GO² 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution RCE...
Unrestricted file upload
KramerAV VIA GO² 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution RCE...
Sql injection
KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...
Design/Logic Flaw
KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...
CVE-2023-33507
KramerAV VIA GO² 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read...
CVE-2023-33509
KramerAV VIA GO² 4.0.1.1326 is vulnerable to SQL Injection...
CVE-2023-33509
CVE-2023-33509 affects KramerAV VIA GO² before version 4.0.1.1326, with a SQL injection vulnerability reported. The CVSS base metrics indicate CRITICAL impact to confidentiality, integrity, and availability (network attack, no user interaction). Remediation: update to 4.0.1.1326 or later where fi...
Kramer VIA GO² 代码问题漏洞
The Kramer VIA GO² is a 4K wireless presentation device from Kramer. A security vulnerability exists in KramerAV VIA GO² versions prior to 4.0.1.1326 that stems from vulnerability to unauthenticated file uploads, which can lead to remote code execution RCE...
PT-2023-24369 · Kramerav · Kramerav Via Go²
Name of the Vulnerable Software and Affected Versions: KramerAV VIA GO² versions prior to 4.0.1.1326 Description: The issue allows for unauthenticated file upload, resulting in Remote Code Execution RCE. Recommendations: For versions prior to 4.0.1.1326, update to version 4.0.1.1326 or later to...
