Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Total 210374 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-24126 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet.
CVE-2022-46303 1 Tribe29 1 Checkmk 2023-03-06 N/A 7.5 HIGH
Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.
CVE-2023-24125 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2_5g parameter at /goform/WifiBasicSet.
CVE-2023-24124 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.
CVE-2023-24123 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.
CVE-2023-24122 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid_5g parameter at /goform/WifiBasicSet.
CVE-2023-24121 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2023-24120 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.
CVE-2023-24119 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.
CVE-2023-24118 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.
CVE-2023-24117 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet.
CVE-2023-24127 1 Heimgardtechnologies 2 Eagle 1200ac, Eagle 1200ac Firmware 2023-03-06 N/A 6.5 MEDIUM
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.
CVE-2022-47703 1 Tianjie 2 Cpe906-3, Cpe906-3 Firmware 2023-03-06 N/A 7.5 HIGH
TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513.
CVE-2022-48318 1 Tribe29 1 Checkmk 2023-03-06 N/A 5.3 MEDIUM
No authorisation controls in the RestAPI documentation for Tribe29's Checkmk <= 2.1.0p13 and Checkmk <= 2.0.0p29 which may lead to unintended information disclosure through automatically generated user specific tags within Rest API documentation.
CVE-2022-47075 1 Smartofficepayroll 1 Smartoffice 2023-03-06 N/A 7.5 HIGH
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx.
CVE-2022-47076 1 Smartofficepayroll 1 Smartoffice 2023-03-06 N/A 7.5 HIGH
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via DisplayParallelLogData.aspx.
CVE-2023-1095 2 Linux, Redhat 2 Linux Kernel, Enterprise Linux 2023-03-06 N/A 5.5 MEDIUM
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.
CVE-2023-26608 1 Vxcontrol 1 Soldr 2023-03-06 N/A 5.4 MEDIUM
SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor.
CVE-2022-38220 1 Quest 1 Kace Systems Management Appliance 2023-03-06 N/A 6.1 MEDIUM
An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote injection of arbitrary web script or HTML.
CVE-2022-30531 2 Intel, Microsoft 2 Iris Xe Max Dedicated Graphics, Windows 2023-03-06 N/A 5.5 MEDIUM
Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access.