CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Schneider Electric U.motion Builder SQL Injection and Remote Code Execution Vulnerability (CVE-2018-7841) Security Advisory
[Affected Scope] Schneider Electric U.motion Builder software version 1.3.4
[Impact] Unauthenticated remote attackers can execute arbitrary code with elevated privileges by injecting malicious SQL commands into vulnerable input fields
[Mitigation] Immediately upgrade to the patched version provided by the vendor, or restrict network access to the device from the public internet
Sierra Wireless AirLink ES450 Gateway upload.cgi Arbitrary File Upload and Remote Code Execution (RCE) Vulnerability (CVE-2018-4063)
[Affected Scope] Sierra Wireless AirLink ES450 firmware version 4.9.3 and its ACEManager web interface
[Impact] An authenticated attacker can upload arbitrary executable files via a crafted HTTP POST request, leading to remote code execution with system privileges
[Mitigation] Apply the latest official firmware security patches and restrict external internet access to the ACEManager interface