PatchTheCVEailux vulnerabilities
Recent CVEs affecting ailux products. 12 tracked.
ailux has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2024-03-05. Highest priority: CVE-2023-5456 (score 45/100).
- CVE-2023-5457 HIGH 7.5 UPGRADE A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by t
- CVE-2023-5456 HIGH 8.1 UPGRADE A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows
- CVE-2023-45600 MEDIUM 5.6 UPGRADE A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “s
- CVE-2023-45599 MEDIUM 5.5 UPGRADE A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” fun
- CVE-2023-45598 MEDIUM 5.3 UPGRADE A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web applica
- CVE-2023-45597 MEDIUM 5.9 UPGRADE A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuratio
- CVE-2023-45596 MEDIUM 5.3 UPGRADE A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the
- CVE-2023-45595 MEDIUM 5.9 UPGRADE A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” function
- CVE-2023-45594 MEDIUM 6.8 UPGRADE A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser
- CVE-2023-45593 MEDIUM 6.8 UPGRADE A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning th
- CVE-2023-45592 MEDIUM 6.8 UPGRADE A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the b
- CVE-2023-45591 HIGH 7.5 UPGRADE A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary a
FAQ
How do I fix ailux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ailux being exploited right now?
None of the tracked ailux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ailux CVE should I patch first?
CVE-2023-5456 currently ranks highest (45/100): A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows .