Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-26 02:09Z
2023-07-11
2023-07-11 10:15Z
CRIT

CVE-2023-36752 — Siemens Ruggedcom_rox_mx5000_firmware: The upgrade-app URL parameter in the web interface of affected devices is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36752

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX CVSSv3.1 9.1 (CRITICAL) · EPSS 74th percentile

CWECWE 77VNDSiemensTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2023-07-11
2023-07-11 10:15Z
CRIT

CVE-2023-36751 — Siemens Ruggedcom_rox_mx5000_firmware: The install-app URL parameter in the web interface of affected devices is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36751

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX CVSSv3.1 9.1 (CRITICAL) · EPSS 74th percentile

CWECWE 77VNDSiemensTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2023-07-11
2023-07-11 10:15Z
CRIT

CVE-2023-36750 — Siemens Ruggedcom_rox_mx5000_firmware: The software-upgrade Url parameter in the web interface of affected devices is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36750

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX CVSSv3.1 9.1 (CRITICAL) · EPSS 74th percentile

CWECWE 77VNDSiemensTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2023-07-11
2023-07-11 10:15Z
HIGH

CVE-2023-36521 — Siemens Simatic_mv540_h_firmware: The result synchronization server of the affected products contains a vulnerability that may lead

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36521

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of all so CVSSv3.1 8.6 (HIGH) · EPSS 49th percentile

CWECWE 770VNDSiemensTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2023-07-11
2023-07-11 10:15Z
HIGH

CVE-2023-36386 — Siemens Ruggedcom_rox_mx5000_firmware: A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36386

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX CVSSv3.1 8.8 (HIGH) · EPSS 37th percentile

CWECWE 79VNDSiemensTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-07-10
2023-07-10 16:15Z
HIGH

CVE-2023-3271 — Sick Icr890-4_firmware: Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3271

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints. CVSSv3.1 8.2 (HIGH) · EPSS 44th percentile

CWECWE 284VNDAccessVNDSickTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2023-07-10
2023-07-10 16:15Z
CRIT

CVE-2023-3045 — Tise Parking_web_report: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3045

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web Report allows SQL Injection.This issue affects Parking Web Report: before 2.1. CVSSv3.1 9.8 (CRITICAL) · EPSS 24th percentile

CWECWE 89VNDTiseTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2023-07-10
2023-07-10 16:15Z
CRIT

CVE-2023-2852 — Softmedyazilim Selfpatron: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2852

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection.This issue affects SelfPatron : before 2.0. CVSSv3.1 9.8 (CRITICAL) · EPSS 24th percentile

CWECWE 89VNDSoftmedyazilimTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-07-10
2023-07-10 16:15Z
CRIT

CVE-2023-2046 — Yontemizleme Vehicle_tracking_system: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2046

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.This issue affects Vehicle Tracking System: before 8. CVSSv3.1 9.8 (CRITICAL) · EPSS 24th percentile

CWECWE 89VNDYontemizlemeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-07-05
2023-07-05 10:15Z
HIGH

CVE-2023-37211 — Mozilla Firefox: Some of these bugs showed evidence of memory corruption and we presume that with

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-37211

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 787VNDMozillaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-07-05
2023-07-05 09:15Z
HIGH

CVE-2023-37202 — Mozilla Firefox: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-37202

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. CVSSv3.1 8.8 (HIGH) · EPSS 54th percentile

CWECWE 416VNDMozillaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-07-05
2023-07-05 03:15Z
HIGH

CVE-2022-42175 — Soluslabs Solusvm: Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-42175

Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers without authorization. CVSSv3.1 8.8 (HIGH) · EPSS 45th percentile

CWECWE 639VNDDirectVNDSoluslabsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-07-01
2023-07-01 06:15Z
HIGH

CVE-2021-4401 — Analogwp Style_kits: The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-4401

The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0. This is due to missing or incorrect nonce validation on the update_posts_stylekit() function. This makes it possible for unauthenticated attackers to update style kits for posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 8.8 (HIGH) · EPSS 51th percentile

CWECWE 352VNDAnalogwpVNDStyleTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-06-30
2023-06-30 23:15Z
HIGH

CVE-2023-36144 — Intelbras Sg_2404_mr_firmware: An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36144

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration. CVSSv3.1 7.5 (HIGH) · EPSS 98th percentile

CWECWE 862VNDIntelbrasTYPVulnerability
7.5
CVSS v3.1
99
Edit Score
2023-06-30
2023-06-30 16:15Z
HIGH

CVE-2023-35178 — Hp W1a75a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-35178

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. CVSSv3.1 8.8 (HIGH) · EPSS 31th percentile

CWECWE 120VNDHpVNDCertainTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-06-30
2023-06-30 16:15Z
HIGH

CVE-2023-35177 — Hp W1a75a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-35177

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser. CVSSv3.1 8.8 (HIGH) · EPSS 29th percentile

CWECWE 787VNDHpVNDCertainTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-06-30
2023-06-30 16:15Z
HIGH

CVE-2023-35176 — Hp W1a75a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-35176

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device. CVSSv3.1 8.8 (HIGH) · EPSS 36th percentile

CWECWE 120VNDHpVNDCertainTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-06-30
2023-06-30 16:15Z
CRIT

CVE-2023-35175 — Hp W1a75a_firmware: Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-35175

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model. CVSSv3.1 9.8 (CRITICAL) · EPSS 76th percentile

CWECWE 918VNDHpVNDCertainTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-06-30
2023-06-30 02:15Z
CRIT

CVE-2023-3249 — Miniorange Web3_-_crypto_wallet_login_\&_nft_token_gating: The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3249

The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hidden_form_data' function. This makes it possible for authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username. CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 288VNDMiniorangeVNDWeb3TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-06-30
2023-06-30 02:15Z
HIGH

CVE-2023-3063 — Smartypantsplugins Sp_project_\&_document_manager: The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-3063

The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.67. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber privileges or above, to change user passwords and potentially take over administrator accounts. CVSSv3.1 8.8 (HIGH) · EPSS 19th percentile

CWECWE 639VNDSmartypantspluginsVNDProjectTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2023-06-30
2023-06-30 02:15Z
CRIT

CVE-2023-2834 — Stylemixthemes Bookit: The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2834

The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. CVSSv3.1 9.8 (CRITICAL) · EPSS 64th percentile

CWECWE 288CWECWE 306VNDStylemixthemesVNDBookitTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-06-30
2023-06-30 01:15Z
HIGH

CVE-2023-36143 — Maxprintisp Maxlink_1200g_firmware: Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool"

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-36143

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device. CVSSv3.1 8.8 (HIGH) · EPSS 82th percentile

CWECWE 78VNDMaxprintispVNDMaxprintTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2023-06-29
2023-06-29 15:15Z
CRIT

CVE-2023-34844 — Play_with_docker_project Play_with_docker: Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-34844

Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape. CVSSv3.1 9.8 (CRITICAL) · EPSS 60th percentile

CWECWE 273VNDPlayVNDPlay With Docker ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2023-06-29
2023-06-29 02:15Z
CRIT

CVE-2023-2982 — Miniorange Wordpress_social_login_and_register_\(discord\,_google\,_twitter: The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-2982

The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the email address associated with that user. This was p CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

CWECWE 288VNDWordpressVNDMiniorangeTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2023-06-28
2023-06-28 20:15Z
CRIT

CVE-2021-25827 — Emby Emby: Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-25827

Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address. CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile

CWECWE 290VNDEmbyTYPVulnerability
9.8
CVSS v3.1
99
Edit Score