Search vulnerabilities

Expected end of text, found '\u200b' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,645

CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46418

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46413

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46412

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46411

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46410

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46409

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46408

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46404

PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.

CVSS 3.1 · 9.9 Critical EPSS 2.3% KEV · Not listed
Vendors
Utoronto
Products
Pcrs
CVE-2023-46396

Audimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via company parameter search filters.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Web-audimex
Products
Audimex
CVE-2023-46394

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Gougucms
Products
Gougucms
CVE-2023-46393

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Gougucms
Products
Gougucms
CVE-2023-46389

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allows remote attackers to disclose sensitive information on LINX configuration.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Loytec
Products
Linx-151 Linx-151 Firmware Linx-212 and 1 more
CVE-2023-46388

LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows remote attackers to disclose smtp client account credentials and bypass email authentication.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Loytec
Products
Linx-151 Linx-151 Firmware Linx-212 and 1 more