VYPR

CVEs

113,634 total · page 970 of 2,273

AllCriticalHighKEV
  • CVE-2023-44423HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.52cvss 8.0epss 0.01

    D-Link DIR-X3260 SetTriggerPPPoEValidate Password Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to…

  • CVE-2023-44422HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.52cvss 8.0epss 0.01

    D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to…

  • CVE-2023-44421HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.52cvss 8.0epss 0.01

    D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to…

  • CVE-2023-44420HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.57cvss 8.8epss 0.01

    D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authentication is not required…

  • CVE-2023-44419HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.57cvss 8.8epss 0.01

    D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this…

  • CVE-2023-44418HigMay 3, 2024
    Dlink
    DIR-X3260
    risk 0.57cvss 8.8epss 0.01

    D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this…

  • CVE-2023-44417HigMay 3, 2024
    Dlink
    DAP-2622
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required…

  • CVE-2023-44415HigMay 3, 2024
    Dlink
    DIR-1260
    risk 0.52cvss 8.0epss 0.01

    D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this…

  • CVE-2023-44413HigMay 3, 2024
    Dlink
    D-View
    risk 0.49cvss 7.5epss 0.01

    D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-44412HigMay 3, 2024
    Dlink
    D-View
    risk 0.60cvss 8.2epss 0.84

    D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-44410HigMay 3, 2024
    Dlink
    D-View
    risk 0.57cvss 8.8epss 0.01

    D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists…

  • CVE-2023-44409HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to…

  • CVE-2023-44408HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit…

  • CVE-2023-44407HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to…

  • CVE-2023-44406HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to…

  • CVE-2023-44405HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this…

  • CVE-2023-44404HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this…

  • CVE-2023-44403HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit…

  • CVE-2023-42131HigMay 3, 2024
    Ansys
    SpaceClaim
    risk 0.51cvss 7.8epss 0.00

    Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42130HigMay 3, 2024
    A10
    Thunder Adc
    risk 0.57cvss 8.8epss 0.02

    A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of A10 Thunder ADC. Authentication is required to exploit this…

  • CVE-2023-42128HigMay 3, 2024
    Magnet Forensics
    AXIOM
    risk 0.52cvss 8.0epss 0.01

    Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-42127HigMay 3, 2024
    Kofax
    Power PDF
    risk 0.51cvss 7.8epss 0.00

    Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42126HigMay 3, 2024
    Gdata
    Total Security
    risk 0.51cvss 7.8epss 0.00

    G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute…

  • CVE-2023-42125HigMay 3, 2024
    Avast\!
    Premium Security
    risk 0.51cvss 7.8epss 0.00

    Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged…

  • CVE-2023-42124HigMay 3, 2024
    Avast\!
    Premium Security
    risk 0.51cvss 7.8epss 0.00

    Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute…

  • CVE-2023-42123HigMay 3, 2024
    Control By Web
    mysql_manager
    risk 0.57cvss 8.8epss 0.02

    Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…

  • CVE-2023-42122HigMay 3, 2024
    Control By Web
    Control Web Panel
    risk 0.51cvss 7.8epss 0.01

    Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2023-42120HigMay 3, 2024
    Control By Web
    Control Web Panel
    risk 0.57cvss 8.8epss 0.02

    Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific…

  • CVE-2023-42118HigMay 3, 2024
    Libspf
    Libspf2
    risk 0.54cvss 8.8epss 0.52

    Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists…

  • CVE-2023-42111HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-42108HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42105HigMay 3, 2024
    Ashlar Vellum
    Cobalt
    risk 0.51cvss 7.8epss 0.00

    Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42104HigMay 3, 2024
    Ashlar Vellum
    Cobalt
    risk 0.51cvss 7.8epss 0.01

    Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42103HigMay 3, 2024
    Ashlar Vellum
    Cobalt
    risk 0.51cvss 7.8epss 0.01

    Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42102HigMay 3, 2024
    Ashlar Vellum
    Cobalt
    risk 0.51cvss 7.8epss 0.00

    Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42101HigMay 3, 2024
    Ashlar Vellum
    Cobalt
    risk 0.51cvss 7.8epss 0.00

    Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-42099HigMay 3, 2024
    Intel
    Driver \& Support Assistant
    risk 0.51cvss 7.8epss 0.00

    Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute…

  • CVE-2023-42097HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2023-42096HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-42094HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2023-42092HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must…

  • CVE-2023-42091HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader XFA Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-42090HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.46cvss 7.1epss 0.00

    Foxit PDF Reader XFA Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-42089HigMay 3, 2024
    Foxitsoftware
    PDF Reader
    risk 0.51cvss 7.8epss 0.00

    Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42088HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-42086HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42085HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in…

  • CVE-2023-42083HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in…

  • CVE-2023-42082HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-42080HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…