[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425077
> CVE-2023-44452 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 1.27%]
Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit a...
AFFECTED_PRODUCTS: Linuxmint Xreader
> CVE-2023-44451 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 1.77%]
Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Linuxmint Xreader
> CVE-2023-44450 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 53.6%]
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit...
AFFECTED_PRODUCTS: Netgear Prosafe Network Management System
> CVE-2023-44449 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 52.6%]
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerabili...
AFFECTED_PRODUCTS: Netgear Prosafe Network Management System
> CVE-2023-44448 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [EPSS 0.58%]
TP-Link Archer A54 libcmm.so dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A54 routers. Authentication is required to exploit this vulnerabili...
AFFECTED_PRODUCTS: Tp-Link Archer A54 Firmware
> CVE-2023-44447 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [EPSS 0.59%]
TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. The...
AFFECTED_PRODUCTS: Tp-Link Tl Wr902ac Firmware, Tp-Link Tl Wr902ac Firmware
> CVE-2023-44446 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.96%]
GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on...
AFFECTED_PRODUCTS: Gstreamer Project Gstreamer
> CVE-2023-44445 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.76%]
NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR CAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...
AFFECTED_PRODUCTS: Netgear Cax30 Firmware
> CVE-2023-44444 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 56.1%]
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious...
AFFECTED_PRODUCTS: Gimp Gimp
> CVE-2023-44443 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 93.6%]
GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali...
AFFECTED_PRODUCTS: Gimp Gimp
> CVE-2023-44442 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 61.2%]
GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o...
AFFECTED_PRODUCTS: Gimp Gimp
> CVE-2023-44441 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 27.3%]
GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o...
AFFECTED_PRODUCTS: Gimp Gimp
> CVE-2023-44440 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.83%]
Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Lithium. User interaction is required to exploit this vulnerability in that the target must visi...
AFFECTED_PRODUCTS: Ashlar Lithium
> CVE-2023-44439 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.83%]
Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Xenon. User interaction is required to exploit this vulnerability in that the target must visit a...
AFFECTED_PRODUCTS: Ashlar Xenon
> CVE-2023-44438 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.83%]
Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit a...
AFFECTED_PRODUCTS: Ashlar Argon
> CVE-2023-44437 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.37%]
Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Ashlar Cobalt
> CVE-2023-44436 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.39%]
Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...
AFFECTED_PRODUCTS: Tungstenautomation Power Pdf
> CVE-2023-44435 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.39%]
Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...
AFFECTED_PRODUCTS: Tungstenautomation Power Pdf
> CVE-2023-44434 [MEDIUM 5.5]
[PUBLISHED: 2024-05-03] [EPSS 0.33%]
Kofax Power PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a...
AFFECTED_PRODUCTS: Tungstenautomation Power Pdf
> CVE-2023-44433 [MEDIUM 5.5]
[PUBLISHED: 2024-05-03] [EPSS 0.33%]
Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must v...
AFFECTED_PRODUCTS: Tungstenautomation Power Pdf
> CVE-2023-44432 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.35%]
Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a mali...
AFFECTED_PRODUCTS: Tungstenautomation Power Pdf
> CVE-2023-44431 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.56%]
BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target mu...
AFFECTED_PRODUCTS: Bluez Bluez
> CVE-2023-44430 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.65%]
Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...
AFFECTED_PRODUCTS: Bentley Microstation, Bentley View
> CVE-2023-44429 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.81%]
GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
AFFECTED_PRODUCTS: Gstreamer Project Gstreamer
> CVE-2023-44428 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.53%]
MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
AFFECTED_PRODUCTS: Musescore Musescore
> CVE-2023-44427 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.37%]
D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vuln...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44426 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.37%]
D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulner...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44425 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.71%]
D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerabil...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44424 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.71%]
D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability,...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44423 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.71%]
D-Link DIR-X3260 SetTriggerPPPoEValidate Password Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerabi...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44422 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.71%]
D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerabilit...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44421 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.71%]
D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerabi...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44420 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.00%]
D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vuln...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44419 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44418 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific...
AFFECTED_PRODUCTS: Dlink Dir X3260 Firmware
> CVE-2023-44417 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vuln...
AFFECTED_PRODUCTS: Dlink Dap 2622 Firmware
> CVE-2023-44416 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [EPSS 1.27%]
D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerability. The specific flaw exists within th...
AFFECTED_PRODUCTS: Dlink Dap 2622 Firmware
> CVE-2023-44415 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.23%]
D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this vulnerability. The specific...
> CVE-2023-44414 [CRITICAL 9.8]
[PUBLISHED: 2024-05-03] [EPSS 2.92%]
D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw ex...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-44413 [HIGH 7.5]
[PUBLISHED: 2024-05-03] [EPSS 1.61%]
D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw ex...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-44412 [HIGH 8.2]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 82.3%]
D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exi...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-44411 [CRITICAL 9.8]
[PUBLISHED: 2024-05-03] [EPSS 2.54%]
D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-44410 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.59%]
D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers me...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-44409 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerabil...
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware
> CVE-2023-44408 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware
> CVE-2023-44407 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware
> CVE-2023-44406 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerabili...
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware
> CVE-2023-44405 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The sp...
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware
> CVE-2023-44404 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability. The...
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware
> CVE-2023-44403 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.35%]
D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink Dap 1325 Firmware