CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

17461 matches found

Prion•added 2023/09/18 11:15 a.m.•28 views

Command injection

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

5.8CVSS7.5AI score0.01205EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/09/18 10:16 a.m.•12 views

CVE-2023-34999

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

8.4CVSS8.1AI score0.01205EPSS

SaveExploits0References1

Cvelist•added 2023/09/18 10:16 a.m.•31 views

CVE-2023-34999

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 5.7.6 and v6 6.5.0 that allows an attacker to perform arbitrary code execution via the admin web interface...

8.4CVSS8.9AI score0.01205EPSS

SaveExploits0References1

CNNVD•added 2023/09/18 12:00 a.m.•13 views

Juplink RX4-1500 Trust Management Issue Vulnerability

The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 versions V1.0.2 through V1.0.5, which stems from the use of hard-coded credentials, which allows an attacker to log in to the web interface or Telnet service as the user user...

9.8CVSS6.8AI score0.00583EPSS

SaveExploits0References3

BDU FSTEC•added 2023/09/16 12:00 a.m.•17 views

The vulnerability of the LuCI interface in the embedded operating system OpenWrt, which allows a hacker to perform XSS attacks.

The vulnerability of the LuCI interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.1CVSS6.2AI score0.00581EPSS

SaveExploits0References3Affected Software1

BDU FSTEC•added 2023/09/16 12:00 a.m.•14 views

The vulnerability of the LuCI web interface in the embedded operating system OpenWrt allows attackers to perform cross-site scripting attacks.

The vulnerability of the LuCI web interface in the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.0051EPSS

SaveExploits0References4Affected Software1

BDU FSTEC•added 2023/09/16 12:00 a.m.•21 views

The vulnerability in the web interface of the LuCI, a built-in operating system called OpenWrt, allows attackers to execute cross-site scripting attacks.

The vulnerability in the LuCI web interface of the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00551EPSS

SaveExploits1References4Affected Software1

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36752)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•31 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36751)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•23 views

Siemens RUGGEDCOM ROX Cross-Site Request Forgery (CVE-2022-29561)

8.8CVSS8.1AI score0.00276EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•16 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36754)

9.1CVSS7.9AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•23 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36753)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•27 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36750)

9.1CVSS8.1AI score0.01535EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•26 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36389)

8.8CVSS6.7AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•17 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36390)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•22 views

Siemens RUGGEDCOM ROX Improper Neutralization of Special Elements Used in a Command (CVE-2023-36755)

9.1CVSS8.1AI score0.00972EPSS

SaveExploits0References3

Tenable Nessus•added 2023/09/14 12:00 a.m.•23 views

Siemens RUGGEDCOM ROX Improper Neutralization of Input During Web Page Generation (CVE-2023-36386)

8.8CVSS6.8AI score0.00442EPSS

SaveExploits0References3

BDU FSTEC•added 2023/09/13 12:00 a.m.•12 views

The vulnerability in the web interface of the data storage system for deploying Cisco HyperFlex hyper-converged infrastructure allows a attacker to redirect users to any arbitrary URL address.

The vulnerability of the web interface of the data storage system for deploying Cisco HyperFlex hyper-converged infrastructure is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

10CVSS7.1AI score0.00584EPSS

SaveExploits0References3

BDU FSTEC•added 2023/09/13 12:00 a.m.•13 views

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W allows a hacker to execute arbitrary code.

The vulnerability of the web interface of microprogramming software for Cisco RV110W, RV130, RV130W, and RV215W lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.0095EPSS

SaveExploits0References2

CNVD•added 2023/09/13 12:00 a.m.•20 views

Damon Enterprise Manager (DEM) suffers from a logic flaw vulnerability (CNVD-2023-78062)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A logic flaw vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to delete arbitrary files...

7.1AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by