Archive
2 June 2023
Vulnerabilities first published on this day (UTC), newest first.
47 results · Clear filters · Feed
-
High 8.8
After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path …
-
High 8.1
After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote pat…
-
High 8.8
SGUDA U-Lock - Broken Access Control
SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with general user privilege can exploit this vulnerability to call privileged APIs to access, modify and delete user information.
-
High 8.8
SGUDA U-Lock - Broken Access Control
SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality o…
-
High 8.0CVE-2022-45938 EPSS 45%
An issue was discovered in Comcast Defined Technologies microeisbss through 2021. An attacker can inject a stored XSS p…
-
High 7.2
Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key
Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption.
-
High 7.2
Hitron Technologies Inc. CODA-5310 - Remote Command Execution
Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker authenticated as an administrator, can use the management page to perform command injection attacks, to execute arbitrary system command, ma…