10 January 2024

33 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-40414

  A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPa…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jan 10, 2024
• Critical 9.1
  CVE-2024-21638

  Azure IPAM solution Elevation of Privilege Vulnerability

  Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as t…

  Azure ipam
  Jan 10, 2024
• Critical 9.6
  CVE-2023-48728 Scanner template

  A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11…

  WWBN AVideo
  Jan 10, 2024
• Critical 9.0
  CVE-2023-47861

  A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 an…

  WWBN AVideo
  Jan 10, 2024
• Critical 9.8
  CVE-2023-47862

  A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commi…

  WWBN AVideo
  Jan 10, 2024
• Critical 9.8
  CVE-2023-49599

  WWBN AVideo Insufficient Entropy vulnerbaility

  An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead to privilege escalation. An attacker can gather system information via HTTP req…

  WWBN AVideo wwbn/avideo Packagist
  Jan 10, 2024
• Critical 9.8
  CVE-2020-26629

  A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allow…

  Jan 10, 2024
• Critical 9.8
  CVE-2023-31488 Public exploit

  Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appl…

  Jan 10, 2024
• Critical 9.8
  CVE-2023-31446 Public exploit Scanner template EPSS 61%

  In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/confi…

  Jan 10, 2024
• Critical 9.8
  CVE-2023-52064

  Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copy…

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51961

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51126 Public exploit EPSS 31%

  Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary command…

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51971

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51963

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51972

  Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51954

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51958

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51966

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51957

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51970

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51953

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51959

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51969

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51956

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51967

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51960

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51952

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51964

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51962

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51123 EPSS 24%

  An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted P…

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51968

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.

  Jan 10, 2024
• Critical 9.8
  CVE-2023-51965

  Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

  Jan 10, 2024
• Critical 9.1
  CVE-2022-46025

  Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers…

  Jan 10, 2024