Skip to content
OpenAdvisories

Archive

27 February 2023

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Critical 9.8

    WAGO: Missing Authentication for Critical Function

    The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.

  • Critical 9.8

    WAGO: Missing Authentication for Critical Function

    The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that ca…

  • Critical 9.8

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS…

  • Critical 9.8

    Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and…

  • Critical 9.8
    CVE-2023-25234 Public exploit EPSS 17%

    Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInt…

  • Critical 9.8

    Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitIn…

  • Critical 9.8

    There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command in…

  • Critical 9.8

    A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful expl…

  • Critical 9.8

    A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful expl…

  • Critical 9.8

    There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow atta…