CVE-2023-34063 | CRITICAL | 9.9 | 0.00949 | 39.93 | No | No | 2024-01-16 | 2025-06-20 | euvd | Aria Automation contains a Missing Access Control vulnerability.
An authenticated malicious actor may
exploit this vulnerability leading …Aria Automation contains a Missing Access Control vulnerability.
An authenticated malicious actor may
exploit this vulnerability leading to unauthorized access to remote
organizations and workflows. |
CVE-2025-50738 | CRITICAL | 9.8 | 0.02077 | 39.93 | No | No | 2025-07-29 | 2025-08-22 | euvd | The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo cont…The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking. |
CVE-2022-3365 | CRITICAL | 9.8 | 0.0208 | 39.93 | No | No | 2025-01-28 | 2025-01-28 | euvd | Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a pas…Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved. |
CVE-2025-9872 | HIGH | 8.8 | 0.13518 | 39.93 | No | No | 2025-09-09 | 2026-02-26 | euvd | Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to…Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. |
CVE-2020-29509 | CRITICAL | 9.8 | 0.02073 | 39.93 | No | No | 2020-12-14 | 2024-09-17 | euvd | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization …The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. |
CVE-2023-31415 | CRITICAL | 9.9 | 0.00957 | 39.93 | No | No | 2023-05-04 | 2025-01-29 | euvd | Kibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges to the Uptime/Synthetics feature could send …Kibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges to the Uptime/Synthetics feature could send a request that will attempt to execute JavaScript code. This could lead to the attacker executing arbitrary commands on the host system with permissions of the Kibana process. |
CVE-2023-29944 | CRITICAL | 9.8 | 0.02083 | 39.93 | No | No | 2023-05-08 | 2025-01-29 | euvd | Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom …Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbench |
CVE-2021-42786 | CRITICAL | 9.8 | 0.02086 | 39.93 | No | No | 2022-03-09 | 2024-09-17 | euvd | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple inst…It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a malicious payload to be injected. |
CVE-2022-0316 | CRITICAL | 9.8 | 0.02084 | 39.93 | No | No | 2023-01-23 | 2025-04-03 | euvd | The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPre…The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server. |
CVE-2023-33669 | CRITICAL | 9.8 | 0.02089 | 39.93 | No | No | 2023-06-02 | 2025-01-08 | euvd | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function.Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function. |
CVE-2021-30168 | CRITICAL | 9.8 | 0.02075 | 39.93 | No | No | 2021-04-28 | 2024-09-16 | euvd | The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential …The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices. |
CVE-2021-35617 | CRITICAL | 9.8 | 0.02074 | 39.93 | No | No | 2021-10-20 | 2024-09-25 | euvd | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that ar…Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
CVE-2022-0748 | CRITICAL | 9.8 | 0.02089 | 39.93 | No | No | 2022-03-17 | 2024-09-17 | euvd | The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any java…The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed. |
CVE-2026-33526 | CRITICAL | 9.2 | 0.08942 | 39.93 | No | Yes | 2026-03-26 | 2026-07-15 | euvd, packetstorm | Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handli…Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch. |
CVE-2020-35797 | CRITICAL | 9.8 | 0.02083 | 39.93 | No | No | 2020-12-29 | 2024-08-04 | euvd | NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker.NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an unauthenticated attacker. |
CVE-2004-2154 | CRITICAL | 9.8 | 0.02072 | 39.93 | No | No | 2005-07-05 | 2024-08-08 | euvd | CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a prin…CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive. |
CVE-2023-25616 | CRITICAL | 9.9 | 0.00949 | 39.93 | No | No | 2023-03-14 | 2025-02-27 | euvd | In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code i…In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system. |
CVE-2023-31903 | CRITICAL | 9.8 | 0.02075 | 39.93 | No | No | 2023-05-17 | 2025-01-27 | euvd | GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file. |
CVE-2022-4939 | CRITICAL | 9.8 | 0.02099 | 39.93 | No | No | 2023-04-05 | 2026-04-08 | euvd | THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing cap…THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it possible for unauthenticated attackers to modify the membership registration form in a way that allows them to set the role for registration to that of any user including administrators. Once configured, the attacker can then register as an administrator. |
CVE-2024-23109 | CRITICAL | 9.7 | 0.03224 | 39.93 | No | No | 2024-02-05 | 2026-01-14 | euvd | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to …An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests. |
CVE-2020-21016 | CRITICAL | 9.8 | 0.02095 | 39.93 | No | No | 2022-10-31 | 2025-05-07 | euvd | D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.…D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php. |
CVE-2021-36302 | CRITICAL | 9.9 | 0.00933 | 39.93 | No | No | 2022-02-09 | 2024-09-16 | euvd | All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user …All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system. |
CVE-2024-20424 | CRITICAL | 9.9 | 0.00935 | 39.93 | No | No | 2024-10-23 | 2024-10-26 | euvd | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Manageme…A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root.
This vulnerability is due to insufficient input validation of certain HTTP requests. An attacker could exploit this vulnerability by authenticating to the web-based management interface of an affected device and then sending a crafted HTTP request to the device. A successful exploit could allow the attacker to execute arbitrary commands with root permissions on the underlying operating system of the Cisco FMC device or to execute commands on managed Cisco Firepower Threat Defense (FTD) devices. To exploit this vulnerability, the attacker would need valid credentials for a user account with at least the role of Security Analyst (Read Only). |
CVE-2017-17674 | CRITICAL | 9.8 | 0.02076 | 39.93 | No | No | 2021-05-19 | 2026-07-09 | euvd, nvd | BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the syst…BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery (SSRF), or remote code execution (RCE). |
CVE-2024-51544 | HIGH | 8.8 | 0.13516 | 39.93 | No | No | 2024-12-05 | 2024-12-05 | euvd | Service Control vulnerabilities allow access to service restart requests and vm configuration settings.
Affected products:
ABB ASPECT - E…Service Control vulnerabilities allow access to service restart requests and vm configuration settings.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02 |
CVE-2024-11236 | CRITICAL | 9.8 | 0.02079 | 39.93 | No | No | 2024-11-24 | 2025-11-03 | euvd | In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on …In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write. |
CVE-2023-3346 | CRITICAL | 9.8 | 0.02095 | 39.93 | No | No | 2023-08-03 | 2024-12-04 | euvd | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated…Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery. |
CVE-2020-7697 | CRITICAL | 9.8 | 0.02044 | 39.92 | No | No | 2020-07-29 | 2024-09-17 | euvd | This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('..…This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res.json(JSON.parse(stdout)); }, '', _data.interfaceUrl, query, _data.cookie,_data.interfaceType); |
CVE-2025-55232 | CRITICAL | 9.8 | 0.02061 | 39.92 | No | No | 2025-09-09 | 2026-02-20 | euvd | Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a ne…Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network. |
CVE-2020-7701 | CRITICAL | 9.8 | 0.02055 | 39.92 | No | No | 2020-08-14 | 2024-09-17 | euvd | madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue. |
CVE-2020-7786 | CRITICAL | 9.8 | 0.02046 | 39.92 | No | No | 2021-02-08 | 2024-09-17 | euvd | This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js.This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js. |
CVE-2021-44164 | CRITICAL | 9.8 | 0.02055 | 39.92 | No | No | 2021-12-20 | 2024-09-16 | euvd | Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker…Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or terminate service. |
CVE-2021-23484 | CRITICAL | 9.8 | 0.0205 | 39.92 | No | No | 2022-01-28 | 2024-09-16 | euvd | The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction …The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory. |
CVE-2026-45633 | CRITICAL | 9.9 | 0.00922 | 39.92 | No | No | 2026-05-29 | 2026-05-29 | euvd, nvd | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contains a command injection vulnerability in …Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.6 and earlier, Dokploy contains a command injection vulnerability in the /docker-container-logs WebSocket endpoint. The tail and since parameters are not validated and are directly concatenated into shell commands, allowing authenticated users to execute arbitrary commands with root privileges. |
CVE-2022-40089 | CRITICAL | 9.8 | 0.02059 | 39.92 | No | No | 2022-09-22 | 2025-05-27 | euvd | A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file…A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On. |
CVE-2020-29510 | CRITICAL | 9.8 | 0.02047 | 39.92 | No | No | 2020-12-14 | 2024-09-16 | euvd | The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-t…The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. |
CVE-2022-41203 | CRITICAL | 9.9 | 0.00924 | 39.92 | No | No | 2022-11-08 | 2025-05-01 | euvd | In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privil…In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted data vulnerability. This could highly compromise the Confidentiality, Integrity, and Availability of the system. |
CVE-2025-69902 | CRITICAL | 9.8 | 0.02057 | 39.92 | No | No | 2026-03-16 | 2026-03-17 | euvd | A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary com…A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters. |
CVE-2025-30390 | CRITICAL | 9.9 | 0.00922 | 39.92 | No | No | 2025-04-30 | 2026-08-10 | euvd | Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.Improper authorization in Azure allows an authorized attacker to elevate privileges over a network. |
CVE-2007-4040 | HIGH | 8.8 | 0.13472 | 39.92 | No | No | 2007-07-27 | 2025-04-03 | euvd | Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers …Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670. |
CVE-2025-29631 | CRITICAL | 9.8 | 0.02047 | 39.92 | No | No | 2025-07-25 | 2026-02-25 | euvd | Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command…Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command injection through vulnerable methods that do not sanitize input before passing content to the operating system for execution. The vulnerability may allow an attacker to execute arbitrary operating system commands on a target Home Kit. |
CVE-2022-36954 | CRITICAL | 9.9 | 0.00926 | 39.92 | No | No | 2022-07-27 | 2024-08-03 | euvd | In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user a…In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter user accounts. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10. |
CVE-2026-50515 | CRITICAL | 9.9 | 0.0091 | 39.92 | No | No | 2026-08-06 | 2026-08-14 | euvd, nvd | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. |
CVE-2021-41299 | CRITICAL | 9.8 | 0.02055 | 39.92 | No | No | 2021-09-30 | 2024-09-16 | euvd | ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administra…ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administrator’s privilege without logging in. |
CVE-2023-33476 | CRITICAL | 9.8 | 0.02061 | 39.92 | No | No | 2023-06-02 | 2025-01-08 | euvd | ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation…ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write. |
CVE-2024-21855 | CRITICAL | 9.8 | 0.02053 | 39.92 | No | No | 2024-11-21 | 2024-11-21 | euvd | A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to ar…A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. |
CVE-2023-27135 | CRITICAL | 9.8 | 0.02047 | 39.92 | No | No | 2023-03-23 | 2025-02-25 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/set…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg. |
CVE-2023-22785 | CRITICAL | 9.8 | 0.02068 | 39.92 | No | No | 2023-05-08 | 2025-01-31 | euvd | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin…There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2023-22783 | CRITICAL | 9.8 | 0.02068 | 39.92 | No | No | 2023-05-08 | 2025-01-31 | euvd | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin…There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system. |
CVE-2023-22782 | CRITICAL | 9.8 | 0.02068 | 39.92 | No | No | 2023-05-08 | 2025-01-31 | euvd | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sendin…There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system. |