Skip to content
OpenAdvisories

Archive

30 July 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.3

    Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File

    Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File

  • High 7.5

    Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

    Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

  • High 7.5

    AnaSystem SensMini M4 – an authenticated user can cause Denial of Service

    AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device

  • High 8.8

    Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

    Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

  • High 8.3

    Sysaid - CWE-552: Files or Directories Accessible to External Parties

    Sysaid - CWE-552: Files or Directories Accessible to External Parties -  Authenticated users may exfiltrate files from the server via an unspecified method.