Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sr. vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-2274
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Typo3 Sr Feuser Register Extension 2.2.5Typo3 Sr Feuser Register Extension 2.2.6Typo3 Sr Feuser Register Extension 2.5.0Typo3 Sr Feuser Register Extension 2.5.1Typo3 Sr Feuser Register Extension 2.5.8Typo3 Sr Feuser Register Extension 2.5.9Typo3 Sr Feuser Register Extension 1.4.0Typo3 Sr Feuser Register Extension 1.6.0Typo3 Sr Feuser Register Extension 2.2.7Typo3 Sr Feuser Register Extension 2.3.0Typo3 Sr Feuser Register Extension 2.3.3Typo3 Sr Feuser Register Extension 2.5.2Typo3 Sr Feuser Register Extension 2.5.3Typo3 Sr Feuser Register Extension 2.2.1Typo3 Sr Feuser Register Extension 2.2.2Typo3 Sr Feuser Register Extension 2.3.4Typo3 Sr Feuser Register Extension 2.3.5Typo3 Sr Feuser Register Extension 2.5.4Typo3 Sr Feuser Register Extension 2.5.5Typo3 Sr Feuser Register Extension 2.2.3Typo3 Sr Feuser Register Extension 2.2.4Typo3 Sr Feuser Register Extension 2.3.6
NA
CVE-2012-5890
The Front End User Registration (sr_feuser_register) extension prior to 2.6.2 for TYPO3 allows remote malicious users to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
Stanislas Rolland Sr Feuser Register 2.5.19Stanislas Rolland Sr Feuser Register 2.5.17Stanislas Rolland Sr Feuser Register 2.5.5Stanislas Rolland Sr Feuser Register 2.5.4Stanislas Rolland Sr Feuser Register 2.3.5Stanislas Rolland Sr Feuser Register 2.3.4Stanislas Rolland Sr Feuser Register 2.2.0Stanislas Rolland Sr Feuser Register 2.1.0Stanislas Rolland Sr Feuser Register 2.0.0Stanislas Rolland Sr Feuser Register 2.5.16Stanislas Rolland Sr Feuser Register 2.5.15Stanislas Rolland Sr Feuser Register 2.5.14Stanislas Rolland Sr Feuser Register 2.5.3Stanislas Rolland Sr Feuser Register 2.5.2Stanislas Rolland Sr Feuser Register 2.3.3Stanislas Rolland Sr Feuser Register 2.3.0Stanislas Rolland Sr Feuser Register 1.4.7Stanislas Rolland Sr Feuser Register 1.6.8Stanislas Rolland Sr Feuser Register 2.5.13Stanislas Rolland Sr Feuser Register 2.5.12Stanislas Rolland Sr Feuser Register 2.5.1Stanislas Rolland Sr Feuser Register 2.5
NA
CVE-2008-2275
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote malicious users to execute arbitrary code and delete arbitrary files via unspecified attack vectors.
Typo3 Sr Feuser Register Extension 2.2.4Typo3 Sr Feuser Register Extension 2.2.5Typo3 Sr Feuser Register Extension 2.2.6Typo3 Sr Feuser Register Extension 2.5.4Typo3 Sr Feuser Register Extension 2.5.5Typo3 Sr Feuser Register Extension 1.4.0Typo3 Sr Feuser Register Extension 2.2.7Typo3 Sr Feuser Register Extension 2.4.0Typo3 Sr Feuser Register Extension 2.5.6Typo3 Sr Feuser Register Extension 2.5.7Typo3 Sr Feuser Register Extension 1.6.0Typo3 Sr Feuser Register Extension 2.2.1Typo3 Sr Feuser Register Extension 2.5.0Typo3 Sr Feuser Register Extension 2.5.1Typo3 Sr Feuser Register Extension 2.5.8Typo3 Sr Feuser Register Extension 2.5.9Typo3 Sr Feuser Register Extension 2.2.2Typo3 Sr Feuser Register Extension 2.2.3Typo3 Sr Feuser Register Extension 2.5.2Typo3 Sr Feuser Register Extension 2.5.3
9.8
CVSSv3
CVE-2019-16699
The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.
Sr Freecap Project Sr Freecap
6.8
CVSSv3
CVE-2023-28390
Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and previous versions and SR-7100VN #31 firmware Ver.1.21 and previous versions allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of t...
Icom Sr-7100vn FirmwareIcom Sr-7100vn\\#31 Firmware
8.8
CVSSv3
CVE-2023-38555
Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent unauthenticated malicious user to obtain, change, and/or reset configuration settings of the affected products. Affected products and versions are as follows: Si-R...
Fujitsu Si-r 30b FirmwareFujitsu Si-r 130b FirmwareFujitsu Si-r 90brin FirmwareFujitsu Si-r570b FirmwareFujitsu Si-r370b FirmwareFujitsu Si-r220d FirmwareFujitsu Si-r G100 FirmwareFujitsu Si-r G200 FirmwareFujitsu Si-r G100b FirmwareFujitsu Si-r G110b FirmwareFujitsu Si-r G200b FirmwareFujitsu Si-r G210 FirmwareFujitsu Si-r G211 FirmwareFujitsu Si-r G120 FirmwareFujitsu Si-r G121 FirmwareFujitsu Sr-m 50ap1 Firmware
9.8
CVSSv3
CVE-2017-7905
A Weak Cryptography for Passwords issue exists in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prio...
Ge Multilin Sr 750 Feeder Protection Relay FirmwareGe Multilin Sr 760 Feeder Protection Relay FirmwareGe Multilin Sr 469 Motor Protection Relay FirmwareGe Multilin Sr 489 Generator Protection Relay FirmwareGe Multilin Sr 745 Transformer Protection Relay FirmwareGe Multilin Sr 369 Motor Protection Relay Firmware -Ge Multilin Universal Relay FirmwareGe Multilin Urplus D90 Firmware -Ge Multilin Urplus C90 Firmware -Ge Multilin Urplus B95 Firmware -
7.5
CVSSv3
CVE-2023-41376
Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes.
Nokia Service Router Linux -Nokia Service Router Operating System 22.10
NA
CVE-2009-0632
The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 prior to 4.2(3)SR4b, 4.3 prior to 4.3(2)SR1b, 5.x prior to 5.1(3e), 6.x prior to 6.1(3), and 7.0 prior to 7.0(2) sends privileged direct...
Cisco Unified Communications Manager 4.1Cisco Unified Communications Manager 4.3\\(2\\)sr1Cisco Unified Communications Manager 4.3\\(2\\)Cisco Unified Communications Manager 5.1\\(1\\)Cisco Unified Communications Manager 5.1\\(3d\\)Cisco Unified Communications Manager 6.1\\(1\\)Cisco Unified Communications Manager 6.1\\(2\\)Cisco Unified Communications Manager 4.2\\(3\\)sr1Cisco Unified Communications Manager 4.2\\(3\\)sr4Cisco Unified Communications Manager 5.1\\(3c\\)Cisco Unified Communications Manager 5.1\\(3a\\)Cisco Unified Communications Manager 6.0\\(1a\\)Cisco Unified Communications Manager 6.0\\(1\\)Cisco Unified Communications Manager 7.0Cisco Unified Communications Manager 7.0\\(1\\)Cisco Unified Communications Manager 4.2\\(3\\)sr3Cisco Unified Communications Manager 4.2\\(3\\)sr2bCisco Unified Communications Manager 5.1\\(3\\)Cisco Unified Communications Manager 5.1\\(2b\\)Cisco Unified Communications Manager 5.1\\(2\\)Cisco Unified Communications Manager 6.1Cisco Unified Communications Manager 6.1\\(2\\)su1
NA
CVE-2006-1960
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express prior to 2.13 allows remote malicious users to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archi...
Cisco Wireless Lan Solution Engine 2.0Cisco Wireless Lan Solution Engine 2.1Cisco Wireless Lan Solution Engine 2.10Cisco Wireless Lan Solution Engine 2.13Cisco Wireless Lan Solution Engine 2.2Cisco Wireless Lan Solution Engine 2.5Cisco Wireless Lan Solution Engine 2.6Cisco Wireless Lan Solution Engine 2.11Cisco Wireless Lan Solution Engine 2.12Cisco Wireless Lan Solution Engine 2.3Cisco Wireless Lan Solution Engine 2.4Cisco Wireless Lan Solution Engine 2.7Cisco Wireless Lan Solution Engine 2.8Cisco Wireless Lan Solution Engine 2.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook