[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425077
> CVE-2023-40516 [HIGH 7.8]
LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of LG Simple Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40515 [HIGH 7.5]
LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw e...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40514 [MEDIUM 6.5]
LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerab...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40513 [MEDIUM 6.5]
LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerabi...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40512 [MEDIUM 6.5]
LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerability...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40511 [HIGH 7.5]
LG Simple Editor checkServer Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the checkServer method....
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40510 [HIGH 7.5]
LG Simple Editor getServerSetting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getServerSettin...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40509 [CRITICAL 9.1]
LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40508 [CRITICAL 9.1]
LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40507 [HIGH 7.5]
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40506 [HIGH 7.5]
LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40505 [CRITICAL 9.8]
LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists w...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40504 [CRITICAL 9.8]
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40503 [HIGH 7.5]
LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40502 [CRITICAL 9.1]
LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40501 [CRITICAL 9.8]
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists wit...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40500 [CRITICAL 9.8]
LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists wit...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40499 [CRITICAL 9.1]
LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mkd...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40498 [CRITICAL 9.8]
LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40497 [CRITICAL 9.8]
LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sav...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40496 [HIGH 7.5]
LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw e...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40495 [HIGH 7.5]
LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exis...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40494 [CRITICAL 9.1]
LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40493 [CRITICAL 9.8]
LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists with...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40492 [CRITICAL 9.1]
LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists w...
AFFECTED_PRODUCTS: Lg Simple Editor
> CVE-2023-40491 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40489 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40488 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40487 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40486 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visi...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40485 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visi...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40484 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visi...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40483 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a mali...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40482 [HIGH 7.8]
Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a mali...
AFFECTED_PRODUCTS: Nemetschek Cinema 4d
> CVE-2023-40481 [HIGH 7.8]
7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o...
AFFECTED_PRODUCTS: 7-Zip 7-Zip
> CVE-2023-40480 [HIGH 8.8]
NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-40479 [HIGH 8.8]
NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-40478 [MEDIUM 6.8]
NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the e...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-40477 [HIGH 7.8]
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must vi...
AFFECTED_PRODUCTS: Rarlab WinRAR
> CVE-2023-40476 [HIGH 8.8]
GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dep...
AFFECTED_PRODUCTS: Gstreamer Project Gstreamer
> CVE-2023-40475 [HIGH 8.8]
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending...
AFFECTED_PRODUCTS: Gstreamer Project Gstreamer
> CVE-2023-40474 [HIGH 8.8]
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending...
AFFECTED_PRODUCTS: Gstreamer Project Gstreamer
> CVE-2023-40473 [MEDIUM 5.5]
PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor
> CVE-2023-40472 [HIGH 7.8]
PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-40471 [HIGH 7.8]
PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a m...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-40470 [MEDIUM 5.5]
PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-40469 [MEDIUM 5.5]
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-40468 [MEDIUM 5.5]
PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-39506 [HIGH 7.8]
PDF-XChange Editor createDataObject Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-39505 [MEDIUM 5.5]
PDF-XChange Editor Net.HTTP.requests Exposed Dangerous Function Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the t...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools