Search vulnerabilities

Expected end of text, found '–' (at char 33), (line:1, col:34)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,864

CVE-2023-38955

ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Bioaccess Ivs
CVE-2023-38954

ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Bioaccess Ivs
CVE-2023-38949

An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Zkteco
Products
Biotime
CVE-2023-38948

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Jizhicms
Products
Jizhicms
CVE-2023-38947

An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Wbce
Products
Wbce Cms
CVE-2023-38942

Dango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability via the component app/config/cloud_config.json.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Dango
Products
Dango-translator
CVE-2023-38941

django-sspanel v2022.2.2 was discovered to contain a remote command execution (RCE) vulnerability via the component sspanel/admin_view.py -> GoodsCreateView._post.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Ehco1996
Products
Django-sspanel
CVE-2023-38940

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1203 F1203 Firmware Fh1203 and 3 more
CVE-2023-38939

Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware Fh1202 and 1 more
CVE-2023-38938

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware Fh1202 and 5 more
CVE-2023-38937

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 11 more
CVE-2023-38936

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 15 more
CVE-2023-38935

Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 7 more
CVE-2023-38934

Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1203 F1203 Firmware Fh1203 and 3 more
CVE-2023-38933

Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 15 more
CVE-2023-38932

Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware Fh1202 and 5 more
CVE-2023-38931

Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 13 more
CVE-2023-38930

Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac5 Ac5 Firmware Ac7 and 7 more
CVE-2023-38929

Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
4g300 4g300 Firmware