VYPR

CVEs

38,095 total · page 317 of 762

AllCriticalHighKEV
  • CVE-2022-48686CriMay 3, 2024
    Linux
    Kernel
    risk 0.64cvss 9.8epss 0.01

    In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop when we set rd_enabled to true, so we don't attempt to read data from the socket when the TCP stream is already…

  • CVE-2022-48673CriMay 3, 2024
    Linux
    Kernel
    risk 0.64cvss 9.8epss 0.01

    In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the Error state, all RX WR would be completed with WC in IB_WC_WR_FLUSH_ERR status. Current implementation does not wait for…

  • CVE-2024-33786CriMay 3, 2024
    Zhongcheng Kexin
    Ticketing Management Platform
    risk 0.64cvss 9.8epss 0.01

    An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file.

  • CVE-2024-4466CriMay 3, 2024
    Centrosdigitales.net
    Gescen
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in Gescen on the centrosdigitales.net platform. This vulnerability allows an attacker to send a specially crafted SQL query to the pass parameter and retrieve all the data stored in the database.

  • CVE-2024-32986CriMay 3, 2024
    PWAsForFirefox
    PWAsForFirefox
    risk 0.55cvss 9.6epss 0.01

    PWAsForFirefox is a tool to install, manage and use Progressive Web Apps (PWAs) in Mozilla Firefox. Due to improper sanitization of web app properties (such as name, description, shortcuts), web apps were able to inject additional lines into XDG Desktop Entries (on Linux) and…

  • CVE-2023-51633CriMay 3, 2024
    Centreon
    Centreon
    risk 0.62cvss 9.6epss 0.01

    Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. User interaction is required to exploit this vulnerability. The specific flaw exists within the…

  • CVE-2023-51595CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.68cvss 9.8epss 0.48

    Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…

  • CVE-2023-51593CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.02

    Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…

  • CVE-2023-51590CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.01

    Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit…

  • CVE-2023-51586CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.01

    Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this…

  • CVE-2023-51583CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.01

    Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…

  • CVE-2023-51582CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.01

    Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…

  • CVE-2023-51581CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.01

    Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…

  • CVE-2023-51576CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.02

    Voltronic Power ViewPower Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…

  • CVE-2023-51575CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.01

    Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this…

  • CVE-2023-51574CriMay 3, 2024
    Voltronic Power
    ViewPower
    risk 0.64cvss 9.8epss 0.02

    Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit…

  • CVE-2023-50231CriMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.67cvss 9.6epss 0.53

    NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is…

  • CVE-2023-44414CriMay 3, 2024
    Dlink
    D-View
    risk 0.64cvss 9.8epss 0.03

    D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-44411CriMay 3, 2024
    Dlink
    D-View
    risk 0.64cvss 9.8epss 0.03

    D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-42121CriMay 3, 2024
    Control By Web
    Control Web Panel
    risk 0.64cvss 9.8epss 0.02

    Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-42117CriMay 3, 2024
    Exim
    Exim
    risk 0.64cvss 9.8epss 0.07

    Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists…

  • CVE-2023-42116CriMay 3, 2024
    Exim
    Exim
    risk 0.64cvss 9.8epss 0.04

    Exim SMTP Challenge Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists…

  • CVE-2023-42115CriMay 3, 2024
    Exim
    Exim
    risk 0.65cvss 9.8epss 0.12

    Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp…

  • CVE-2023-40509CriMay 3, 2024
    LG
    Simple Editor
    risk 0.59cvss 9.1epss 0.02

    LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40508CriMay 3, 2024
    LG
    Simple Editor
    risk 0.59cvss 9.1epss 0.02

    LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40505CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40504CriMay 3, 2024
    LG
    Simple Editor
    risk 0.74cvss 9.8epss 0.89

    LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40502CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.83

    LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40501CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40500CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.02

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40499CriMay 3, 2024
    LG
    Simple Editor
    risk 0.59cvss 9.1epss 0.02

    LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-40498CriMay 3, 2024
    LG
    Simple Editor
    risk 0.73cvss 9.8epss 0.85

    LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-40497CriMay 3, 2024
    LG
    Simple Editor
    risk 0.69cvss 9.8epss 0.69

    LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-40494CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.83

    LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40493CriMay 3, 2024
    LG
    Simple Editor
    risk 0.64cvss 9.8epss 0.03

    LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40492CriMay 3, 2024
    LG
    Simple Editor
    risk 0.66cvss 9.1epss 0.83

    LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-39476CriMay 3, 2024
    Inductiveautomation
    Ignition
    risk 0.64cvss 9.8epss 0.02

    Inductive Automation Ignition JavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is not…

  • CVE-2023-39475CriMay 3, 2024
    Inductiveautomation
    Ignition
    risk 0.64cvss 9.8epss 0.64

    Inductive Automation Ignition ParameterVersionJavaSerializationCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition.…

  • CVE-2023-39457CriMay 3, 2024
    Trianglemicroworks
    SCADA Data Gateway
    risk 0.64cvss 9.8epss 0.02

    Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-38121CriMay 3, 2024
    Inductiveautomation
    Ignition
    risk 0.59cvss 9.0epss 0.01

    Inductive Automation Ignition OPC UA Quick Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit…

  • CVE-2023-38096CriMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.73cvss 9.8epss 0.82

    NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to…

  • CVE-2023-32174CriMay 3, 2024
    Unified Automation
    UaGateway
    risk 0.59cvss 9.1epss 0.02

    Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unified Automation UaGateway. Authentication is required to exploit this…

  • CVE-2023-32169CriMay 3, 2024
    Dlink
    D-View
    risk 0.68cvss 9.8epss 0.56

    D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-32165CriMay 3, 2024
    Dlink
    D-View
    risk 0.70cvss 9.8epss 0.73

    D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-27335CriMay 3, 2024
    Softx
    edgeAggregator
    risk 0.62cvss 9.6epss 0.01

    Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. User interaction is required to exploit this vulnerability in that…

  • CVE-2024-3729CriMay 2, 2024
    Dynamiapps
    Frontend Admin
    risk 0.57cvss 9.8epss 0.01

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'fea_encrypt' function in all versions up to, and including, 3.19.4. This makes it possible for unauthenticated attackers to manipulate the user…

  • CVE-2024-2876CriMay 2, 2024
    WordPress
    Email Subscribers by Icegram Express
    risk 0.63cvss 9.8epss 0.81

    The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and including, 5.7.14 due to…

  • CVE-2024-2667CriMay 2, 2024
    Instawp
    Instawp Connect
    risk 0.64cvss 9.8epss 0.06

    The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This makes it…

  • CVE-2024-31967CriMay 2, 2024
    Mitel
    6970 Conference Unit
    risk 0.59cvss 9.1epss 0.00

    A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A…

  • CVE-2024-4406CriMay 2, 2024
    Xiaomi
    Pro 13
    risk 0.63cvss 9.6epss 0.02

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this…