Filtered by CWE-15
Filtered by vendor Subscriptions
Total 45 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-43323 1 Moosocial 1 Moosocial 2024-11-21 6.5 Medium
mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].
CVE-2023-3321 1 Abb 1 Zenon 2024-11-21 7 High
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
CVE-2021-3707 1 Dlink 2 Dsl-2750u, Dsl-2750u Firmware 2024-11-21 5.5 Medium
D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device.
CVE-2021-38453 1 Auvesy 1 Versiondog 2024-11-21 9.1 Critical
Some API functions allow interaction with the registry, which includes reading values as well as data modification.
CVE-2021-31338 1 Siemens 1 Sinema Remote Connect 2024-11-21 7.8 High
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device.