2023

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username

The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP comman

The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote co

The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files

Files present on firmware images could allow an attacker to gain unauthorized access as a root user using hard-code

The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this spec

IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scri

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a n

In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.ph

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management int

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network

Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers.

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A

When supplied with a random MAC address, Snap One OvrC cloud servers will return information about the device.

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates

GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit

In MyBB before 1.8.34, there is XSS in the User CP module via the user email field.

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbit

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.

Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2.

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attack

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attacker

An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that re

An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localh

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injectio

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper vali

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for c

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache

Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects

Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: f

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue

Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLo

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue

Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLo

Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’

Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the

Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously u

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify d

Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devic

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an auth

Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 ver

Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This iss

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This iss