Security Vulnerabilities - CVEs Published In April 2023
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVSS Score
4.9
EPSS Score
0.001
Published
2023-04-21
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.
CVSS Score
4.9
EPSS Score
0.001
Published
2023-04-21
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm.
CVSS Score
4.9
EPSS Score
0.001
Published
2023-04-21
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVSS Score
4.9
EPSS Score
0.001
Published
2023-04-21
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm.
CVSS Score
4.9
EPSS Score
0.001
Published
2023-04-21
A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1_TBRO_20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227001 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-04-21
Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI.
CVSS Score
6.1
EPSS Score
0.004
Published
2023-04-21
Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component.
CVSS Score
5.5
EPSS Score
0.001
Published
2023-04-21
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
CVSS Score
9.1
EPSS Score
0.909
Published
2023-04-21
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
CVSS Score
6.8
EPSS Score
0.001
Published
2023-04-21