https://vulnogram.org/ Most recent CVEs assigned by Exodus Intelligence (xi). https://vulnogram.org/seaview/icons/xi.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2024-24622 https://vulnogram.org/CVE-2024-24622 Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system. Critical Thu, 25 Jul 2024 21:44:53 GMT https://vulnogram.org/CVE-2024-24623 https://vulnogram.org/CVE-2024-24623 Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticated attacker can exploit this vulnerability to gain code execution on the system. Critical Unsupported When Assigned Thu, 25 Jul 2024 21:44:51 GMT https://vulnogram.org/CVE-2024-24621 https://vulnogram.org/CVE-2024-24621 Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality. Remote, anonymous attackers can exploit this vulnerability to gain full server access as the root user. Critical Network Exploitable Thu, 25 Jul 2024 21:44:48 GMT https://vulnogram.org/CVE-2024-23630 https://vulnogram.org/CVE-2024-23630 An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on the device. Authentication is required, however can be bypassed. Critical Thu, 25 Jan 2024 23:41:32 GMT https://vulnogram.org/CVE-2024-23629 https://vulnogram.org/CVE-2024-23629 An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information. Critical Thu, 25 Jan 2024 23:41:29 GMT https://vulnogram.org/CVE-2024-23628 https://vulnogram.org/CVE-2024-23628 A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed. Critical Thu, 25 Jan 2024 23:41:27 GMT https://vulnogram.org/CVE-2024-23627 https://vulnogram.org/CVE-2024-23627 A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed. Critical Thu, 25 Jan 2024 23:41:25 GMT https://vulnogram.org/CVE-2024-23626 https://vulnogram.org/CVE-2024-23626 A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed. Critical Thu, 25 Jan 2024 23:41:22 GMT https://vulnogram.org/CVE-2024-23625 https://vulnogram.org/CVE-2024-23625 A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. Critical Thu, 25 Jan 2024 23:41:20 GMT https://vulnogram.org/CVE-2024-23624 https://vulnogram.org/CVE-2024-23624 A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. Critical Thu, 25 Jan 2024 23:41:18 GMT https://vulnogram.org/CVE-2024-23622 https://vulnogram.org/CVE-2024-23622 A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges. Critical Network Exploitable Thu, 25 Jan 2024 23:36:03 GMT https://vulnogram.org/CVE-2024-23621 https://vulnogram.org/CVE-2024-23621 A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution. Critical Network Exploitable Thu, 25 Jan 2024 23:36:01 GMT https://vulnogram.org/CVE-2024-23620 https://vulnogram.org/CVE-2024-23620 An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM. High Thu, 25 Jan 2024 23:35:58 GMT https://vulnogram.org/CVE-2024-23619 https://vulnogram.org/CVE-2024-23619 A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution. Critical Network Exploitable Thu, 25 Jan 2024 23:35:56 GMT https://vulnogram.org/CVE-2024-23618 https://vulnogram.org/CVE-2024-23618 An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root. Critical Thu, 25 Jan 2024 23:35:54 GMT https://vulnogram.org/CVE-2024-23617 https://vulnogram.org/CVE-2024-23617 A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution. Critical Network Exploitable Thu, 25 Jan 2024 23:32:28 GMT https://vulnogram.org/CVE-2024-23616 https://vulnogram.org/CVE-2024-23616 A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM. Critical Network Exploitable Thu, 25 Jan 2024 23:32:25 GMT https://vulnogram.org/CVE-2024-23615 https://vulnogram.org/CVE-2024-23615 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root. Critical Network Exploitable Thu, 25 Jan 2024 23:32:23 GMT https://vulnogram.org/CVE-2024-23614 https://vulnogram.org/CVE-2024-23614 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root. Critical Network Exploitable Thu, 25 Jan 2024 23:32:21 GMT https://vulnogram.org/CVE-2024-23613 https://vulnogram.org/CVE-2024-23613 A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM. Critical Network Exploitable Thu, 25 Jan 2024 23:32:17 GMT https://vulnogram.org/CVE-2023-43824 https://vulnogram.org/CVE-2023-43824 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially… High Network Exploitable Thu, 18 Jan 2024 21:16:48 GMT https://vulnogram.org/CVE-2023-43823 https://vulnogram.org/CVE-2023-43823 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially cr… High Network Exploitable Thu, 18 Jan 2024 21:16:36 GMT https://vulnogram.org/CVE-2023-43822 https://vulnogram.org/CVE-2023-43822 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a speci… High Network Exploitable Thu, 18 Jan 2024 21:16:25 GMT https://vulnogram.org/CVE-2023-43821 https://vulnogram.org/CVE-2023-43821 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a spe… High Network Exploitable Thu, 18 Jan 2024 21:16:15 GMT https://vulnogram.org/CVE-2023-43820 https://vulnogram.org/CVE-2023-43820 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a… High Network Exploitable Thu, 18 Jan 2024 21:16:04 GMT https://vulnogram.org/CVE-2023-43819 https://vulnogram.org/CVE-2023-43819 A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a special… High Network Exploitable Thu, 18 Jan 2024 21:15:53 GMT https://vulnogram.org/CVE-2023-43818 https://vulnogram.org/CVE-2023-43818 A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. High Network Exploitable Thu, 18 Jan 2024 21:15:44 GMT https://vulnogram.org/CVE-2023-43817 https://vulnogram.org/CVE-2023-43817 A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailContentLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS… High Network Exploitable Thu, 18 Jan 2024 21:15:32 GMT https://vulnogram.org/CVE-2023-43816 https://vulnogram.org/CVE-2023-43816 A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wKPFStringLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially… Medium Network Exploitable Thu, 18 Jan 2024 21:15:21 GMT https://vulnogram.org/CVE-2023-43815 https://vulnogram.org/CVE-2023-43815 A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wScreenDESCTextLen field of a DPS file. An anonymous attacker can exploit this vulnerability by enticing a user to open a speci… High Network Exploitable Thu, 18 Jan 2024 21:15:04 GMT https://vulnogram.org/CVE-2023-5131 https://vulnogram.org/CVE-2023-5131 A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution. High Network Exploitable Thu, 18 Jan 2024 21:14:39 GMT https://vulnogram.org/CVE-2023-5130 https://vulnogram.org/CVE-2023-5130 A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution. High Network Exploitable Thu, 18 Jan 2024 21:14:26 GMT https://vulnogram.org/CVE-2023-41031 https://vulnogram.org/CVE-2023-41031 Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint. High Fri, 22 Sep 2023 16:07:59 GMT https://vulnogram.org/CVE-2023-41029 https://vulnogram.org/CVE-2023-41029 Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to… High Fri, 22 Sep 2023 16:07:12 GMT https://vulnogram.org/CVE-2023-41027 https://vulnogram.org/CVE-2023-41027 Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpo… High Fri, 22 Sep 2023 16:06:05 GMT https://vulnogram.org/CVE-2023-41030 https://vulnogram.org/CVE-2023-41030 Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user. Medium Mon, 18 Sep 2023 18:22:08 GMT https://vulnogram.org/CVE-2023-41028 https://vulnogram.org/CVE-2023-41028 A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root. Critical Wed, 23 Aug 2023 21:47:26 GMT