Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
39,009 results · page 392 of 781
Aug 24, 2023Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.CVE-2023-40892 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.
- Product
- ac8v4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2023Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.CVE-2023-40891 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.
- Product
- ac8v4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2023PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.CVE-2023-39834 · Other software · Pbootcms · reported by MITRECritical 9.8
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
- Product
- Pbootcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2023XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.CVE-2023-40573 · Other software · xwiki · reported by GitHubCritical 9
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain Groovy scripts. Currently, the job checks the content author of the job for programming right. However, modifying or adding a job script to a document doesn't modify the content author. Together with a CSRF vulnerability in the job scheduler, this can be exploited for remote code execution by an attacker with edit right on the wiki. If the attack is successful, an error log entry with "Job content executed" will be produced. This vulnerability has been patched in XWiki 14.10.9 and 15.4RC1.
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2023XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.CVE-2023-40572 · Other software · xwiki · reported by GitHubCritical 9
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus compromising the confidentiality, integrity and availability of the whole XWiki installation. When a user with script right views this image and a log message `ERROR foo - Script executed!` appears in the log, the XWiki installation is vulnerable. This has been patched in XWiki 14.10.9 and 15.4RC1 by requiring a CSRF token for the actual page creation.
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2023A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5.CVE-2023-41028 · Other software · Juplink · reported by disclosures@exodusintel.comCritical 9
A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.
- Product
- RX4-1500
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.exodusintel.comblog.exodusintel.com
Aug 23, 2023XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.CVE-2023-40177 · Other software · xwiki · reported by GitHubCritical 9.9
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content field of their user profile page to execute arbitrary scripts with programming rights, thus effectively performing rights escalation. This issue is present since version 4.3M2 when AppWithinMinutes Application added support for the Content field, allowing any wiki page (including the user profile page) to use its content as an AWM Content field, which has a custom displayer that executes the content with the rights of the ``AppWithinMinutes.Content`` author, rather than the rights of the content author. The vulnerability has been fixed in XWiki 14.10.5 and 15.1RC1. The fix is in the content of the AppWithinMinutes.Content page that defines the custom displayer. By using the ``display`` script service to render the content we make sure that the proper author is used for access rights checks.
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2023XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.CVE-2023-40176 · Other software · xwiki · reported by GitHubCritical 9
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop down (no free text value) it can still be set from JavaScript (using the browser developer tools) or by calling the save URL on the user profile with the right query string. Once the time zone is set it is displayed without escaping which means the payload gets executed for any user that visits the malicious user profile, allowing the attacker to steal information and even gain more access rights (escalation to programming rights). This issue is present since version 4.1M2 when the time zone user preference was introduced. The issue has been fixed in XWiki 14.10.5 and 15.1RC1.
- Product
- xwiki-platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2023Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon LCVE-2023-4041 · Other software · Silicon Labs · reported by product-security@silabs.comCritical 9.8
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentication Bypass.This issue affects "Standalone" and "Application" versions of Gecko Bootloader.
- Product
- Gecko Bootloader
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsiliconlabs.lightning.force.comsiliconlabs.lightning.force.com
Aug 22, 2023Donation Forms by Charitable: Privilege escalationCVE-2023-4404 · WordPress plugins & themes · reported by WordfenceCritical 9.8
The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.
- Product
- Donation Forms by Charitable
- Affected
- up to 1.7.0.12
- What to do
- Affects up to 1.7.0.12. Update Donation Forms by Charitable to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Aug 22, 2023Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive information and causeCVE-2020-24113 · Other software · yealink · reported by MITRECritical 9.1
Directory Traversal vulnerability in Contacts File Upload Interface in Yealink W60B version 77.83.0.85, allows attackers to gain sensitive information and cause a denial of service (DoS).
- Product
- w60b
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt.CVE-2023-36281 · Other software · Langchain · reported by MITRECritical 9.8
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to __subclasses__ or a template.
- Product
- Langchain
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023An XML External Entity (XXE) issue was discovered in Python through 3.9.1.CVE-2022-48565 · Other software · Python · reported by MITRECritical 9.8
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
- Product
- Python
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.python.orglists.debian.org
Aug 22, 2023In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.CVE-2022-48522 · Other software · Siemens · reported by MITRECritical 9.8
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.
- Product
- SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsecurity.netapp.com
Aug 22, 2023There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35.CVE-2022-48174 · Other software · Siemens · reported by MITRECritical 9.8
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
- Product
- RUGGEDCOM RST2428P
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.busybox.netbugs.busybox.net
Aug 22, 2023An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via capture of user login information.CVE-2022-45611 · Other software · Fresenius-kabi · reported by MITRECritical 9.8
An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via capture of user login information.
- Product
- Pharmahelp Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfresenius-kabi.comfresenius.com
Aug 22, 2023The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qeCVE-2022-36648 · Other software · Qemu · reported by MITRECritical 10
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third parties as not a valid vulnerability due to the rocker device not falling within the virtualization use case.
- Product
- Qemu
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.nongnu.orgsecurity.netapp.com
Aug 22, 2023dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y.CVE-2021-33390 · Other software · Dpic Project · reported by MITRECritical 9.8
dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.
- Product
- Dpic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.yCVE-2021-33388 · Other software · Dpic Project · reported by MITRECritical 9.8
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
- Product
- Dpic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726.CVE-2021-32292 · Other software · Siemens · reported by MITRECritical 9.8
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.
- Product
- SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsecurity.netapp.com
Aug 21, 2023Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.CVE-2023-25915 · Other software · Danfoss · reported by csirt@divd.nlCritical 9.9
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.
- Product
- AK-SM800A
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcsirt.divd.nlcsirt.divd.nl
Aug 21, 2023 Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a CVE-2023-4373 · Other software · Devolutions · reported by security@devolutions.netCritical 9.8
Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.
- Product
- Remote Desktop Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevolutions.netdevolutions.net
Aug 21, 2023An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.CVE-2023-39660 · Other software · Gabrieleventuri · reported by MITRECritical 9.8
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.
- Product
- Pandasai
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 21, 2023Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed coCVE-2023-38961 · Other software · Jerryscript · reported by MITRECritical 9.8
Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.
- Product
- Jerryscript
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 21, 2023Ivanti Sentry Authentication Bypass VulnerabilityCVE-2023-38035 · Network & remote access · Ivanti · reported by support@hackerone.comExploitedRansomwareCritical 9.8
Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
- Product
- Sentry
- On CISA’s list since
- Aug 22, 2023 (federal fix deadline Sep 12, 2023)
- What to do
- Attackers are using this now. Install Ivanti’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comforums.ivanti.com
Aug 21, 2023The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.CVE-2023-32002 · Other software · NodeJS · reported by support@hackerone.comCritical 9.8
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
- Product
- Node
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackerone.comsecurity.netapp.com
Aug 21, 2023user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the cCVE-2023-31447 · Network & remote access · draytek · reported by MITRECritical 9.8
user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.
- Product
- vigor2620
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddraytek.comgist.github.com
Aug 21, 2023An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privilegesCVE-2020-28715 · Other software · leeco · reported by MITRECritical 9.8
An issue was discovered in kdmserver service in LeEco LeTV X43 version V2401RCN02C080080B04121S, allows attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS).
- Product
- letv_x43
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcnvd.org.cncnvd.org.cn
Aug 21, 2023SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauCVE-2023-39939 · Other software · LuxSoft · reported by vultures@jpcert.or.jpCritical 9.1
SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it.
- Product
- LuxCal Web Calendar
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2023TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.CVE-2023-39751 · Network & remote access · tp-link · reported by MITRECritical 9.8
TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.
- Product
- tl-wr941nd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2023D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6.CVE-2023-39750 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request.
- Product
- dap-2660
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2023D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource.CVE-2023-39749 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request.
- Product
- dap-2660
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2023TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRCVE-2023-39747 · Network & remote access · tp-link · reported by MITRECritical 9.8
TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.
- Product
- wr841n_v8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 20, 2023TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface.CVE-2023-39618 · Other software · totolink · reported by MITRECritical 9.8
TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface.
- Product
- x5000r
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsedate-class-393.notion.sitesedate-class-393.notion.site
Aug 20, 2023TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang pCVE-2023-39617 · Other software · totolink · reported by MITRECritical 9.8
TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.
- Product
- x5000r
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsedate-class-393.notion.sitesedate-class-393.notion.site
Aug 20, 2023N.V.K.INTER CO., LTD.CVE-2023-39809 · Other software · Nvki · reported by MITRECritical 9.8
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.
- Product
- Intelligent Broadband Subscriber Gateway
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsec.maride.cc
Aug 20, 2023N.V.K.INTER CO., LTD.CVE-2023-39808 · Other software · Nvki · reported by MITRECritical 9.8
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password that allows attackers to login with root privileges via the SSH service. The cleartext password corresponding to the $1$4Tmm01jl$7HRvcW.bz7uGmX9hiQWvR hash was not determined by the vulnerability discoverer.
- Product
- Intelligent Broadband Subscriber Gateway
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsec.maride.cc
Aug 20, 2023N.V.K.INTER CO., LTD.CVE-2023-39807 · Other software · Nvki · reported by MITRECritical 9.8
N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.
- Product
- Intelligent Broadband Subscriber Gateway
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsec.maride.cc
Aug 20, 2023TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object InstantiaCVE-2022-24989 · Other software · terra-master · reported by MITRECritical 9.8
TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.
- Product
- terramaster_operating_system
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordattackerkb.comforum.terra-master.com
Aug 18, 2023OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a CVE-2023-40069 · Other software · ELECOM CO.,LTD. · reported by vultures@jpcert.or.jpCritical 9.8
OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.
- Product
- WRC-F1167ACF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 18, 2023Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.CVE-2023-39454 · Other software · ELECOM CO.,LTD. · reported by vultures@jpcert.or.jpCritical 9.8
Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
- Product
- WRC-X1800GS-B
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 18, 2023Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and CVE-2023-35991 · Other software · LOGITEC CORPORATION · reported by vultures@jpcert.or.jpCritical 9.8
Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.
- Product
- LAN-W300N/DR
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 18, 2023Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's ceCVE-2023-32626 · Other software · LOGITEC CORPORATION · reported by vultures@jpcert.or.jpCritical 9.8
Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
- Product
- LAN-W300N/RS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2023D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets.CVE-2023-39674 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets.
- Product
- dir-880l
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsupport.dlink.com
Aug 17, 2023Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().CVE-2023-39673 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().
- Product
- ac15
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2023Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.CVE-2023-39672 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.
- Product
- wh450a
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2023D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68.CVE-2023-39671 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68.
- Product
- dir-880l
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsupport.dlink.com
Aug 17, 2023Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.CVE-2023-39670 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
- Product
- ac6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 17, 2023D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function.CVE-2023-39668 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function.
- Product
- dir-868l
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsupport.dlink.com
Aug 17, 2023D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function.CVE-2023-39667 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function.
- Product
- dir-868l_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsupport.dlink.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.