4076 matches found
CVE-2023-39964
Summary: CVE-2023-39964 affects 1Panel O&M panel. In version 1.4.3, the function LoadFromFile in api/v1/file.go reads a server file directly from the unfiltered path parameter, enabling arbitrary file reads of important configuration files. The issue is a background file read vulnerability exploi...
CVE-2023-38180
CVE-2023-38180 is a .NET/Visual Studio denial-of-service vulnerability (DoS) affecting .NET Core and related components. The CVSSv3.1 vector indicates Network attack, low attack complexity, no privileges required, with no confidentiality/integirty impact but a High availability impact. Moderate-t...
CVE-2023-36899
CVE-2023-36899 is described as a .NET Framework/ASP.NET elevation of privilege issue linked to IIS and cookieless sessions. The connected exploit writeups show an IIS environment where the 1cookieless 1 feature can be abused to bypass authentication and access protected resources by crafting URL...
CVE-2023-37569
CVE-2023-37569 concerns ESDS Emagic Data Center Management Suite with a vulnerability in the Ping component due to lack of input sanitization, enabling a remote authenticated attacker to inject OS commands and potentially execute arbitrary code. Affected software is ESDS Emagic Data Center Manage...
CVE-2023-4169
The CVE-2023-4169 entry affects Ruijie RG-EW1200G model 1.0(1)B1P5. Affected component: /api/sys/set_passwd in Administrator Password Handler. Root cause: improper access controls allow an attacker to reset the administrator password remotely. Impact: attacker can take full control of the router ...
CVE-2023-4166
CVE-2023-4166 describes a SQL injection in Tongda OA, exposed via DELETE_STR in general/system/seal_manage/dianju/delete_log.php. The vulnerability affects Tongda OA prior to version 11.10, where user-controlled input in DELETE_STR leads to unauthorized database access. Exploitation status is ind...
CVE-2023-39143
CVE-2023-39143 affects PaperCut NG/MF before 22.1.3 on Windows. The vulnerability is a path traversal flaw that allows an unauthenticated actor to read, upload, or delete arbitrary files, which can lead to remote code execution when external device integration is enabled. The issue is documented ...
CVE-2023-35081
Ivanti Endpoint Manager Mobile (EPMM) is affected by CVE-2023-35081, a path traversal vulnerability that allows an authenticated administrator to write arbitrary files to the appliance. The issue impacts EPMM versions 11.10.x prior to 11.10.0.3, 11.9.x prior to 11.9.1.2, and 11.8.x prior to 11.8....
CVE-2023-38951
CVE-2023-38951 affects ZKTeco BioTime versions 8.5.5 through 9.x prior to 9.0.1. A path traversal flaw in the /base/sftpsetting/ endpoint allows an authenticated attacker to create or overwrite arbitrary server files by abusing the Username field and insufficient input sanitization on the SSH Key...
CVE-2023-37679
CVE-2023-37679 / CVE-2023-43208 (NextGen HealthCare Mirth Connect) : Open-source data integration platform vulnerable to unauthenticated remote code execution due to improper/deserialization handling. Affects Mirth Connect versions prior to 4.4.1 (PoCs and advisories reference vulnerable ranges i...
CVE-2023-38950
ZKTeco BioTime v8.5.5 is affected by a path traversal vulnerability in the iclock API that allows unauthenticated attackers to read arbitrary files by supplying a crafted payload. This is due to insufficient path validation in the iclock API parameter handling. The issue is fixed in ZKBioTime ver...
CVE-2023-34960
CVE-2023-34960 affects Chamilo LMS (version 1.11.* up to 1.11.18) with a command-injection vulnerability in the wsConvertPpt component. An unauthenticated SOAP API call using a crafted PowerPoint name can lead to arbitrary OS command execution. Public details indicate a high/critical impact (CVSS...
CVE-2022-39986
RaspAP 2.8.0–2.8.7 is affected by an unauthenticated command-injection vulnerability. An attacker can inject commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php, potentially leading to remote code execution. Public exploitation tooling exists ...
CVE-2023-37580
CVE-2023-37580 – Zimbra Collaboration Suite (ZCS) XSS : The Nuclei template confirms a Cross-Site Scripting vulnerability in ZCS 8.x before 8.8.15 Patch 41, specifically in the Zimbra Classic Web Client. Impact described in the connected doc: successful exploitation could execute arbitrary script...
CVE-2020-22623
CVE-2020-22623 describes a directory traversal vulnerability in Jinfornet Jreport 15.6 that allows unauthenticated attackers to access sensitive information. Multiple sources in connected documents corroborate the same issue, identifying Jinfornet Jreport 15.6 as affected and the root cause as a ...
CVE-2023-38606
CVE-2023-38606 affects Apple’s kernel across iOS, iPadOS, macOS, tvOS and watchOS; the issue allows an app to modify a sensitive kernel state. The vulnerability was addressed with updated state management and patches, with fixes in macOS Monterey 12.6.8, iOS 15.7.8/iPadOS 15.7.8, iOS 16.6/iPadOS ...
CVE-2023-37450
CVE-2023-37450 is a WebKit/WebKitGTK-related vulnerability where processing web content may lead to arbitrary code execution. Apple’s documentation states the issue was addressed with improved checks and memory handling, with fixes in iOS 16.6 / iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventur...
CVE-2023-38433
CVE-2023-38433 affects Fujitsu Real-time Video Transmission Gear IP series. The vulnerability arises from hard-coded credentials (CWE-798) that could allow a remote, unauthenticated attacker to log in and initialize or reboot devices, terminating video transmission. Affected firmware versions inc...
CVE-2023-32629
CVE-2023-32629 is an OverlayFS local privilege escalation in Ubuntu kernels. The issue arises when OverlayFS copy-up uses host credentials while preserving xattrs, allowing an unprivileged user (with user namespaces) to gain real root outside the namespace by exploiting a trusted cap_setuid xattr...