VYPR

CVEs

113,629 total · page 972 of 2,273

AllCriticalHighKEV
  • CVE-2023-41194HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit…

  • CVE-2023-41193HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to…

  • CVE-2023-41192HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit…

  • CVE-2023-41191HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this…

  • CVE-2023-41190HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this…

  • CVE-2023-41189HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit…

  • CVE-2023-41188HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit…

  • CVE-2023-41187HigMay 3, 2024
    Dlink
    DAP-1325
    risk 0.57cvss 8.8epss 0.01

    D-Link DAP-1325 HNAP Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-41185HigMay 3, 2024
    Unified Automation
    UaGateway
    risk 0.49cvss 7.5epss 0.01

    Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. Authentication is not required to…

  • CVE-2023-41184HigMay 3, 2024
    TP-Link
    Tapo C210
    risk 0.52cvss 8.0epss 0.01

    TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit…

  • CVE-2023-41183HigMay 3, 2024
    Netgear
    Orbi 760
    risk 0.58cvss 8.8epss 0.15

    NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. The specific flaw…

  • CVE-2023-41182HigMay 3, 2024
    Netgear
    Prosafe Network Management System
    risk 0.62cvss 8.8epss 0.59

    NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…

  • CVE-2023-40517HigMay 3, 2024
    LG
    Supersign Media Editor
    risk 0.49cvss 7.5epss 0.02

    LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required…

  • CVE-2023-40516HigMay 3, 2024
    LG
    Simple Editor
    risk 0.51cvss 7.8epss 0.00

    LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on…

  • CVE-2023-40515HigMay 3, 2024
    LG
    Simple Editor
    risk 0.49cvss 7.5epss 0.01

    LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.…

  • CVE-2023-40511HigMay 3, 2024
    LG
    Simple Editor
    risk 0.49cvss 7.5epss 0.01

    LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…

  • CVE-2023-40510HigMay 3, 2024
    LG
    Simple Editor
    risk 0.49cvss 7.5epss 0.01

    LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists…

  • CVE-2023-40507HigMay 3, 2024
    LG
    Simple Editor
    risk 0.49cvss 7.5epss 0.01

    LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this…

  • CVE-2023-40506HigMay 3, 2024
    LG
    Simple Editor
    risk 0.49cvss 7.5epss 0.01

    LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this…

  • CVE-2023-40503HigMay 3, 2024
    LG
    Simple Editor
    risk 0.49cvss 7.5epss 0.01

    LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this…

  • CVE-2023-40496HigMay 3, 2024
    LG
    Simple Editor
    risk 0.55cvss 7.5epss 0.77

    LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.…

  • CVE-2023-40495HigMay 3, 2024
    LG
    Simple Editor
    risk 0.55cvss 7.5epss 0.77

    LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. …

  • CVE-2023-40491HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-40489HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-40488HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-40487HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target…

  • CVE-2023-40486HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-40485HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-40484HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-40483HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-40482HigMay 3, 2024
    Maxon
    Cinema 4d
    risk 0.51cvss 7.8epss 0.00

    Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-40481HigMay 3, 2024
    7 Zip
    7 Zip
    risk 0.53cvss 7.8epss 0.27

    7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit…

  • CVE-2023-40480HigMay 3, 2024
    Netgear
    RAX30
    risk 0.57cvss 8.8epss 0.01

    NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40479HigMay 3, 2024
    Netgear
    RAX30
    risk 0.57cvss 8.8epss 0.01

    NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The…

  • CVE-2023-40477HigMay 3, 2024
    Rarlab
    Winrar
    risk 0.52cvss 7.8epss 0.12

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in…

  • CVE-2023-40476HigMay 3, 2024
    Gstreamer
    Gstreamer
    risk 0.57cvss 8.8epss 0.02

    GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack…

  • CVE-2023-40475HigMay 3, 2024
    Gstreamer
    Gstreamer
    risk 0.57cvss 8.8epss 0.02

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack…

  • CVE-2023-40474HigMay 3, 2024
    Gstreamer
    Gstreamer
    risk 0.57cvss 8.8epss 0.02

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack…

  • CVE-2023-40472HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this…

  • CVE-2023-40471HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the…

  • CVE-2023-39506HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.01

    PDF-XChange Editor createDataObject Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39502HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor OXPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39501HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this…

  • CVE-2023-39500HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39499HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39498HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39497HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39496HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…

  • CVE-2023-39494HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability…

  • CVE-2023-39493HigMay 3, 2024
    PDF-XChange
    Editor
    risk 0.51cvss 7.8epss 0.00

    PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that…