[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425077
> CVE-2023-32170 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [EPSS 0.59%]
Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation UaGateway. User interaction is required to exploit this vulnerabili...
AFFECTED_PRODUCTS: Unified-Automation Uagateway
> CVE-2023-32169 [CRITICAL 9.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 56.1%]
D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the To...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-32168 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.63%]
D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUser meth...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-32167 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 74.9%]
D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exis...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-32166 [HIGH 8.1]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 74.3%]
D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadFi...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-32165 [CRITICAL 9.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 73.3%]
D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-32164 [HIGH 7.5]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 84.9%]
D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists...
AFFECTED_PRODUCTS: Dlink D View 8
> CVE-2023-32161 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.57%]
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-32160 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.57%]
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-32159 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.57%]
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-32158 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.58%]
PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Pdf-Xchange Pdf Xchange Editor, Pdf-Xchange Pdf Tools
> CVE-2023-32157 [HIGH 7.5]
[PUBLISHED: 2024-05-03] [EPSS 0.40%]
Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the t...
AFFECTED_PRODUCTS: Tesla Model 3 Firmware
> CVE-2023-32156 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.43%]
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in order...
AFFECTED_PRODUCTS: Tesla Model 3 Firmware
> CVE-2023-32155 [HIGH 7.0]
[PUBLISHED: 2024-05-03] [EPSS 0.22%]
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerabili...
AFFECTED_PRODUCTS: Tesla Model 3 Firmware
> CVE-2023-32154 [HIGH 7.5]
[PUBLISHED: 2024-05-03] [EPSS 0.65%]
Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability. The specific flaw exists with...
AFFECTED_PRODUCTS: Mikrotik RouterOS
> CVE-2023-32153 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 26.9%]
D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authen...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32152 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 28.9%]
D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32151 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [EPSS 1.80%]
D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing auth...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32150 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 26.9%]
D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authen...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32149 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.24%]
D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32148 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 28.9%]
D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32147 [MEDIUM 6.8]
[PUBLISHED: 2024-05-03] [EPSS 1.80%]
D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing a...
AFFECTED_PRODUCTS: Dlink Dir 2640 Firmware
> CVE-2023-32146 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.10%]
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32145 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.92%]
D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32144 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.04%]
D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerabilit...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32143 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.13%]
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The spec...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32142 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.10%]
D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The sp...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32141 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.10%]
D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32140 [HIGH 7.5]
[PUBLISHED: 2024-05-03] [EPSS 0.91%]
D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. Th...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32139 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.04%]
D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32138 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.93%]
D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific fla...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32137 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [EPSS 1.17%]
D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability....
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32136 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 1.16%]
D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The sp...
AFFECTED_PRODUCTS: Dlink Dap 1360 Firmware, Dlink Dap 2020 Firmware
> CVE-2023-32135 [MEDIUM 6.5]
[PUBLISHED: 2024-05-03] [EPSS 0.60%]
Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target...
AFFECTED_PRODUCTS: Santesoft Dicom Viewer Pro, Santesoft Dicom Editor
> CVE-2023-32134 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.70%]
Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must vis...
AFFECTED_PRODUCTS: Santesoft Dicom Viewer Pro, Santesoft Dicom Editor
> CVE-2023-32133 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.67%]
Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Santesoft Dicom Viewer Pro, Santesoft Dicom Editor
> CVE-2023-32132 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.67%]
Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Santesoft Dicom Viewer Pro, Santesoft Dicom Editor
> CVE-2023-32131 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.67%]
Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target mus...
AFFECTED_PRODUCTS: Santesoft Dicom Viewer Pro, Santesoft Dicom Editor
> CVE-2023-27370 [MEDIUM 5.7]
[PUBLISHED: 2024-05-03] [EPSS 0.34%]
NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-27369 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.78%]
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exi...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-27368 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.78%]
NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific f...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-27367 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 1.37%]
NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentic...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-27366 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.54%]
Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious pag...
AFFECTED_PRODUCTS: Foxit Pdf Reader, Foxit Pdf Editor, Foxit Pdf Editor ... (+1)
> CVE-2023-27365 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.54%]
Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Foxit Pdf Reader, Foxit Pdf Editor, Foxit Pdf Editor ... (+1)
> CVE-2023-27364 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.54%]
Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor. User interaction is required to exploit this vulnerability in that the target must visit...
AFFECTED_PRODUCTS: Foxit Pdf Reader, Foxit Pdf Editor, Foxit Pdf Editor ... (+1)
> CVE-2023-27363 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [âš¡ EPSS 42.0%]
Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...
AFFECTED_PRODUCTS: Foxit Pdf Reader, Foxit Pdf Editor, Foxit Pdf Editor ... (+1)
> CVE-2023-27362 [HIGH 7.8]
[PUBLISHED: 2024-05-03] [EPSS 0.40%]
3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerabili...
AFFECTED_PRODUCTS: 3Cx 3cx
> CVE-2023-27361 [HIGH 8.0]
[PUBLISHED: 2024-05-03] [EPSS 0.86%]
NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is required to exploit this vulnerability. The specif...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-27360 [HIGH 8.8]
[PUBLISHED: 2024-05-03] [EPSS 0.45%]
NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the c...
AFFECTED_PRODUCTS: Netgear Rax30 Firmware
> CVE-2023-27359 [HIGH 8.1]
[PUBLISHED: 2024-05-03] [EPSS 1.17%]
TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...
AFFECTED_PRODUCTS: Tp-Link Archer Ax21 Firmware