Skip to content
OpenAdvisories

Archive

24 September 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-5145 EPSS 34%

    D-Link DAR-7000 licence.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_u…

  • Medium 6.3

    D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload lead…

  • Medium 6.3

    D-Link DAR-7000 webmailattach.php Privilege Escalation

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name lea…

  • Medium 6.6

    Insecure barbican configuration file leaking credential

    A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.

  • Medium 6.0

    Incomplete container isolation

    A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenSt…