VYPR

CVEs

31,788 total · page 231 of 636

AllCriticalHighKEV
  • CVE-2023-31422CriOct 26, 2023
    Elastic
    Kibana
    risk 0.59cvss 9.0epss 0.01

    An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. The issue impacts only Kibana version 8.10.0 when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. Elastic has…

  • CVE-2023-30967CriOct 26, 2023
    Gotham
    Orbital-Simulator
    risk 0.64cvss 9.8epss 0.01

    Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.

  • CVE-2023-46584CriOct 25, 2023
    Phpgurukul
    Nipah Virus Testing Management System
    risk 0.64cvss 9.8epss 0.01

    SQL Injection vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint.

  • CVE-2023-46233CriOct 25, 2023
    Brix
    Crypto Js
    risk 0.52cvss 9.1epss 0.01

    crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA1, a cryptographic…

  • CVE-2023-46133CriOct 25, 2023
    Entronad
    Crypto Es
    risk 0.52cvss 9.1epss 0.00

    CryptoES is a cryptography algorithms library compatible with ES6 and TypeScript. Prior to version 2.1.0, CryptoES PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults…

  • CVE-2023-45137CriOct 25, 2023
    Cryptpad
    Xwiki Platform
    risk 0.52cvss 9.0epss 0.01

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` starting in version 3.1-milestone-2 and prior to version 13.4-rc-1, as well as `org.xwiki.platform:xwiki-platform-web-templates` prior…

  • CVE-2023-46424CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function.

  • CVE-2023-46423CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function.

  • CVE-2023-46422CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.

  • CVE-2023-46421CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function.

  • CVE-2023-46420CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.

  • CVE-2023-46419CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.

  • CVE-2023-46418CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.

  • CVE-2023-46417CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function.

  • CVE-2023-46416CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.

  • CVE-2023-46415CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.

  • CVE-2023-46414CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.

  • CVE-2023-46413CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function.

  • CVE-2023-46412CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function.

  • CVE-2023-46411CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function.

  • CVE-2023-46410CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function.

  • CVE-2023-46409CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function.

  • CVE-2023-46408CriOct 25, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function.

  • CVE-2023-45136CriOct 25, 2023
    Cryptpad
    Xwiki Platform
    risk 0.56cvss 9.6epss 0.05

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according to a name strategy (disabled by default), XWiki starting in version 12.0-rc-1 and prior to versions 12.10.12 and 15.5-rc-1 is…

  • CVE-2023-45135CriOct 25, 2023
    Cryptpad
    Xwiki Platform
    risk 0.52cvss 9.0epss 0.02

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.platform:xwiki-platform-web` versions 7.2-milestone-2 until 14.10.12 and `org.xwiki.platform:xwiki-platform-web-templates` prior to versions 14.10.12 and…

  • CVE-2023-45134CriOct 25, 2023
    Cryptpad
    Xwiki Platform
    risk 0.52cvss 9.0epss 0.02

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` starting in version 3.1-milestone-1 and prior to 13.4-rc-1, `org.xwiki.platform:xwiki-platform-web-templates` prior to versions…

  • CVE-2023-5746CriOct 25, 2023
    Synology
    Camera Firmware
    risk 0.64cvss 9.8epss 0.02

    A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected:…

  • CVE-2023-5731CriOct 25, 2023
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 119.

  • CVE-2023-5730CriOct 25, 2023
    Mozilla Corporation
    Firefox
    risk 0.64cvss 9.8epss 0.01

    Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox <…

  • CVE-2023-46574CriOct 25, 2023
    Totolink
    A3700R
    risk 0.69cvss 9.8epss 0.65

    An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.

  • CVE-2023-46564CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.

  • CVE-2023-46563CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS.

  • CVE-2023-46562CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg.

  • CVE-2023-46560CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup.

  • CVE-2023-46559CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr.

  • CVE-2023-46558CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

  • CVE-2023-46557CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN.

  • CVE-2023-46556CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter.

  • CVE-2023-46555CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw.

  • CVE-2023-46554CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel.

  • CVE-2023-46553CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl.

  • CVE-2023-46552CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.

  • CVE-2023-46551CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.

  • CVE-2023-46550CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

  • CVE-2023-46549CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg.

  • CVE-2023-46548CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect.

  • CVE-2023-46547CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog.

  • CVE-2023-46546CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats.

  • CVE-2023-46545CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc.

  • CVE-2023-46544CriOct 25, 2023
    Totolink
    X2000R-Gh
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl.