[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425077
> CVE-2023-50234 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.34%]
Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Cell. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Hancom Office Cell
> CVE-2023-50233 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 2.08%]
Inductive Automation Ignition getJavaExecutable Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50232 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.39%]
Inductive Automation Ignition getParams Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit this vulnerability in that the targ...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50231 [CRITICAL 9.6]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 53.3%]
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploit t...
AFFECTED_PRODUCTS: Netgear Prosafe Network Management System
> CVE-2023-50230 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.49%]
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connec...
AFFECTED_PRODUCTS: Bluez Bluez
> CVE-2023-50229 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 2.29%]
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connec...
AFFECTED_PRODUCTS: Bluez Bluez
> CVE-2023-50228 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.21%]
Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged co...
AFFECTED_PRODUCTS: Parallels Parallels Desktop
> CVE-2023-50227 [HIGH 8.3]
[PUBLISHED: 2024-05-03] [EPSS 0.76%]
Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction is required to exploit this vulnerability in that the target in a guest system m...
AFFECTED_PRODUCTS: Parallels Parallels Desktop
> CVE-2023-50226 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.69%]
Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in or...
AFFECTED_PRODUCTS: Parallels Parallels Desktop, Parallels Parallels Desktop
> CVE-2023-50225 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [EPSS 0.54%]
TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR902AC routers. Authentication is required to exploit this vulnerability. The s...
AFFECTED_PRODUCTS: Tp-Link Tl Wr902ac Firmware
> CVE-2023-50224 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [âš  CISA_KEV] [âš¡ EPSS 20.0%]
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. Th...
AFFECTED_PRODUCTS: Tp-Link Tl Wr841n Firmware
> CVE-2023-50223 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 54.9%]
Inductive Automation Ignition ExtendedDocumentCodec Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulne...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50222 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.15%]
Inductive Automation Ignition ResponseParser Notification Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit th...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50221 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.15%]
Inductive Automation Ignition ResponseParser SerializedResponse Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to expl...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50220 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.85%]
Inductive Automation Ignition Base64Element Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50219 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.50%]
Inductive Automation Ignition RunQuery Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability. Th...
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50218 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 55.0%]
Inductive Automation Ignition ModuleInvoke Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. Authentication is required to exploit this vulnerability....
AFFECTED_PRODUCTS: Inductiveautomation Ignition
> CVE-2023-50217 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50216 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50215 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.95%]
D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific fla...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50214 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.95%]
D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50213 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw e...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50212 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [EPSS 0.51%]
D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50211 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.64%]
D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerabili...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50210 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.64%]
D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50209 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.64%]
D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific f...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50208 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.64%]
D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50207 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists w...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50206 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw e...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50205 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists wi...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50204 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.95%]
D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific fla...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50203 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.95%]
D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists wi...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50202 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50201 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists wi...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50200 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50199 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.70%]
D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The speci...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50198 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.19%]
D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
AFFECTED_PRODUCTS: Dlink G416 Firmware
> CVE-2023-50197 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.25%]
Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the ta...
AFFECTED_PRODUCTS: Intel Driver \& Support Assistant
> CVE-2023-50196 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.34%]
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must v...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50195 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.40%]
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mu...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50194 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.40%]
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mu...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50193 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.45%]
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must v...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50192 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.45%]
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must v...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50191 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.45%]
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must v...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50190 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.40%]
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target m...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50189 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.45%]
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must v...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50188 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.42%]
Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the targe...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50187 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.40%]
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Trimble Sketchup Viewer, Trimble Sketchup Viewer
> CVE-2023-50186 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.53%]
GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may var...
AFFECTED_PRODUCTS: Gstreamer Project Gstreamer
> CVE-2023-47220 [MEDIUM 6.6]
[PUBLISHED: 2024-05-03] [EPSS 1.19%]
An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 (...