Login Request a demo
NE
Product
Nexo-os
by Bosch · last CVE Jan 10, 2024
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 8High 9Medium 8Low 0
Severity
All severities25Critical8High9Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nexo-os to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-48249
6.5
1%
Jan 10
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted…
Affected: 1000 through 1500-sp2
CVE-2023-48246
6.5
1%
Jan 10
The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48242
6.5
1%
Jan 10
The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a…
Affected: 1000 through 1500-sp2
CVE-2023-48256
6.3
0%
Jan 10
The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48255
6.1
0%
Jan 10
The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a…
Affected: 1000 through 1500-sp2
CVE-2023-48254
6.1
0%
Jan 10
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48244
6.1
0%
Jan 10
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request
Affected: 1000 through 1500-sp2
CVE-2023-48248
5.4
0%
Jan 10
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a…
Affected: 1000 through 1500-sp2
Showing 8