NE
Product
Nexo-os
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 9Medium 8Low 0
Watch
Add Nexo-os to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-48266 | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… Affected: 1000 through 1500-sp2 |
| CVE-2023-48265 | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… Affected: 1000 through 1500-sp2 |
| CVE-2023-48264 | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… Affected: 1000 through 1500-sp2 |
| CVE-2023-48263 | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… Affected: 1000 through 1500-sp2 |
| CVE-2023-48262 | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… Affected: 1000 through 1500-sp2 |
| CVE-2023-48251 | 9.8 | Jan 10 | The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account Affected: 1000 through 1500-sp2 |
| CVE-2023-48250 | 9.8 | Jan 10 | The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts Affected: 1000 through 1500-sp2 |
| CVE-2023-48245 | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48257 | 8.8 | Jan 10 | The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device Affected: 1000 through 1500-sp2 |
| CVE-2023-48253 | 8.8 | Jan 10 | The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48252 | 8.8 | Jan 10 | The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests Affected: 1000 through 1500-sp2 |
| CVE-2023-48243 | 8.8 | Jan 10 | The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48258 | 8.1 | Jan 10 | The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session Affected: 1000 through 1500-sp2 |
| CVE-2023-48261 | 7.5 | Jan 10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48260 | 7.5 | Jan 10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48259 | 7.5 | Jan 10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48247 | 7.5 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48249 | 6.5 | Jan 10 | The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted… Affected: 1000 through 1500-sp2 |
| CVE-2023-48246 | 6.5 | Jan 10 | The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48242 | 6.5 | Jan 10 | The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a… Affected: 1000 through 1500-sp2 |
| CVE-2023-48256 | 6.3 | Jan 10 | The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48255 | 6.1 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a… Affected: 1000 through 1500-sp2 |
| CVE-2023-48254 | 6.1 | Jan 10 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48244 | 6.1 | Jan 10 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request Affected: 1000 through 1500-sp2 |
| CVE-2023-48248 | 5.4 | Jan 10 | The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a… Affected: 1000 through 1500-sp2 |
Showing 25