Archive
January 2023
Vulnerabilities first published in this month (UTC), newest first.
2,382 results · Feed
-
High 7.8
Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in th…
-
Medium 6.5
Path Traversal In Eclipse GlassFish
In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such …
-
Medium 5.4
A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows atta…
-
Medium 6.1
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue …
-
Low 3.1
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After succes…
-
Medium 6.1
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue …
-
Medium 6.1
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue …
-
High 8.8
Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions …
-
Medium 6.1
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue …
-
High 7.1
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue …
-
Critical 9.8
SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
-
Medium 6.1
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue …
-
Low 3.5
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After succes…
-
Medium 5.6
Limited Authentication bypass due to hardcoded secret
There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a valid session when he is not trying to do a login. Since the secret is static in generatePublicHash function, an attacker with knowledge of a v…
-
Medium 5.2CVE-2022-43980 Public exploit
Cross-site scripting vulnerability in the network maps edit functionality
There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An attacker could modify a network map, including on purpose the name of an XSS payload. Once created, if a user with admin privileges clicks o…
-
Medium 5.9
Path Traversal leading to Local File Inclusion
There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an…
-
Medium 6.8
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege…
-
High 7.5
A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attacke…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1…
-
High 7.2
An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210…
-
Medium 6.5
A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-21072…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.…
-
Medium 4.9
A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-2107…
-
High 7.2
A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. …
-
High 7.2
A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-…
-
High 7.2
An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…