Skip to content
OpenAdvisories

Archive

28 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /28 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-38029

    Saho ADM100&ADM-100FP - Arbitrary File Upload

    Saho’s attendance devices ADM100 and ADM-100FP has insufficient filtering for special characters and file type within their file uploading function. A unauthenticate remote attacker authenticated can upload and execute arbitrary files to perform arbitrary sys…

    Saho ADM-100FP ADM100
  • Critical 9.1
    CVE-2023-38028

    Saho ADM100&ADM-100FP - Broken Access Control

    Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt…

    Saho ADM-100FP ADM100
  • Critical 9.8
    CVE-2023-38027

    SpotCam Co., Ltd. SpotCam Sense - Command Injection

    SpotCam Co., Ltd. SpotCam Sense’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to perform arbitrary system commands or disrupt service.

    SPOTCAM SpotCam Sense
  • Critical 9.8
    CVE-2023-38026

    SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -2

    SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.

    SPOTCAM SpotCam FHD 2
  • Critical 9.8
    CVE-2023-38025

    SpotCam Co., Ltd. SpotCamFHD - Command Injection -1

    SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.

    SPOTCAM SpotCam FHD 2
  • Critical 9.8
    CVE-2023-38024

    SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -1

    SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt servi…

    SPOTCAM SpotCam FHD 2