Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Imx6 CRITICAL 9.8
CVE-2023-45600

A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitate…

Fix: 1.0.7-2+
Fix from $2,300 2024-03-05
Imx6 CRITICAL 9.8
CVE-2023-5457

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the “debug” …

Fix: 1.0.7-2+
Fix from $2,300 2024-03-05
Imx6 CRITICAL 9.0
CVE-2023-45597

A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web application…

Fix: 1.0.7-2+
Fix from $2,300 2024-03-05
Imx6 HIGH 8.8
CVE-2023-45599

A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allow…

Fix: 1.0.7-2+
Fix from $1,950 2024-03-05
Imx6 MEDIUM 5.3
CVE-2023-45598

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated at…

Fix: 1.0.7-2+
Fix from $1,600 2024-03-05
Imx6 CRITICAL 9.8
CVE-2023-45592

A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-san…

Fix: 1.0.7-2+
Fix from $2,300 2024-03-05
Imx6 HIGH 8.8
CVE-2023-45595

A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web application allows a r…

Fix: 1.0.7-2+
Fix from $1,950 2024-03-05
Imx6 MEDIUM 6.8
CVE-2023-45593

A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other t…

Fix: 1.0.7-2+
Fix from $1,600 2024-03-05
Imx6 MEDIUM 6.8
CVE-2023-45594

A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrar…

Fix: 1.0.7-2+
Fix from $1,600 2024-03-05
Imx6 MEDIUM 5.3
CVE-2023-45596

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthe…

Fix: 1.0.7-2+
Fix from $1,600 2024-03-05
Imx6 HIGH 8.8
CVE-2023-45591

A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker t…

Fix: 1.0.7-2+
Fix from $1,950 2024-03-05
Imx6 CRITICAL 9.8
CVE-2023-5456

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote unauthenticated attacker to ac…

Fix: 1.0.7-2+
Fix from $2,300 2024-03-05