Total
419339 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-42250 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php. | |||||
| CVE-2023-42249 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php. | |||||
| CVE-2023-42248 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 6.5 MEDIUM |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vam_Sql.php". | |||||
| CVE-2023-42247 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php. | |||||
| CVE-2023-42246 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php. | |||||
| CVE-2023-42245 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php. | |||||
| CVE-2023-42244 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 8.8 HIGH |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_visits.php. | |||||
| CVE-2023-42243 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 5.4 MEDIUM |
| In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries. | |||||
| CVE-2023-42242 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/s_terminal.php. | |||||
| CVE-2023-42241 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_anagraphic.php. | |||||
| CVE-2023-42240 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/s_scheduledfile.php. | |||||
| CVE-2023-42239 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_ep.php. | |||||
| CVE-2023-42238 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_eps.php. | |||||
| CVE-2023-42237 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple GET parameters of /vam/vam_i_command.php. | |||||
| CVE-2023-42236 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php. | |||||
| CVE-2023-42235 | 1 Seling | 1 Visual Access Manager | 2026-06-17 | N/A | 3.8 LOW |
| An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/s_normalizedtrans.php. | |||||
| CVE-2023-42234 | 1 Zucchetti | 1 Helpdeskadvanced | 2026-06-17 | N/A | 5.4 MEDIUM |
| Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function. | |||||
| CVE-2023-42233 | 1 Zucchetti | 1 Helpdeskadvanced | 2026-06-17 | N/A | 6.1 MEDIUM |
| Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function. | |||||
| CVE-2023-42232 | 1 Zucchetti | 1 Helpdeskadvanced | 2026-06-17 | N/A | 7.5 HIGH |
| Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function. | |||||
| CVE-2023-42231 | 1 Zucchetti | 1 Helpdeskadvanced | 2026-06-17 | N/A | 8.1 HIGH |
| Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function. | |||||