Page 320 of 8688 results (0.174 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-32201

https://notcve.org/view.php?id=CVE-2023-32201

Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. • https://jvn.jp/en/vu/JVNVU98818508 https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-32276

https://notcve.org/view.php?id=CVE-2023-32276

Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. • https://jvn.jp/en/vu/JVNVU98818508 https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-32270

https://notcve.org/view.php?id=CVE-2023-32270

Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. • https://jvn.jp/en/vu/JVNVU98818508 https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-32273

https://notcve.org/view.php?id=CVE-2023-32273

Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. • https://jvn.jp/en/vu/JVNVU98818508 https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php • CWE-787: Out-of-bounds Write •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-1208 – HTTP Headers < 1.18.11 - Admin+ Remote Code Execution

https://notcve.org/view.php?id=CVE-2023-1208

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability. The HTTP Headers plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.18.10 via the 'http_headers_pre_update_option' function. This allows authenticated attackers with administrator-level permissions to write files and execute code on the server. The issue was partially fixed in 1.18.10 but not fully fixed until 1.18.11. • https://wpscan.com/vulnerability/e0cc6740-866a-4a81-a93d-ff486b79b7f7 • CWE-94: Improper Control of Generation of Code ('Code Injection') •