AiLux vulnerabilities

Newest CVEs

• CVE-2023-45600

  A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session…

  AiLux · imx6 bundle

  Medium5.6
• CVE-2023-45599

  A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote…

  AiLux · imx6 bundle

  Medium5.5
• CVE-2023-45598

  A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to…

  AiLux · imx6 bundle

  Medium5.3
• CVE-2023-45597

  A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functionality of the web application…

  AiLux · imx6 bundle

  Medium5.9
• CVE-2023-45596

  A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated…

  AiLux · imx6 bundle

  Medium5.3
• CVE-2023-45595

  A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of the web application allows a remote…

  AiLux · imx6 bundle

  Medium5.9
• CVE-2023-45594

  A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily…

  AiLux · imx6 bundle

  Medium6.8
• CVE-2023-45593

  A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other than “…

  AiLux · imx6 bundle

  Medium6.8
• CVE-2023-45592

  A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the “--no-sandbox”…

  AiLux · imx6 bundle

  Medium6.8
• CVE-2023-45591

  A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger…

  AiLux · imx6 bundle

  High7.5