Skip to content
OpenAdvisories

Archive

27 September 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-40044 Exploited · Ransomware Public exploit Scanner template EPSS 90%

    WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

    KEV Oct 5, 2023
  • Medium 6.3
    CVE-2023-5222 Public exploit Scanner template EPSS 80%

    Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password

    A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-co…