Vulnerabilities (CVE)

Filtered by CWE-15
Total 65 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-43323 1 Moosocial 1 Moosocial 2026-06-17 N/A 6.5 MEDIUM
mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].
CVE-2023-3321 1 Abb 1 Zenon 2026-06-17 N/A 7.0 HIGH
A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404.
CVE-2023-32349 1 Teltonika-networks 36 Rut200, Rut200 Firmware, Rut240 and 33 more 2026-06-17 N/A 8.0 HIGH
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution.
CVE-2022-41582 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.
CVE-2021-38453 1 Auvesy 1 Versiondog 2026-06-17 6.4 MEDIUM 9.1 CRITICAL
Some API functions allow interaction with the registry, which includes reading values as well as data modification.