CVE-2021-43159

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the setSessionTime function in /cgi-bin/luci/api/common...

CVE-2021-43161

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch...

CVE-2021-43164

CVE-2021-43164 affects Ruijie RG-EW Series routers running ReyeeOS up to 1.55.1915 / EW_3.0(1)B11P55. The vulnerability is an RCE via the updateVersion function in /cgi-bin/luci/api/wireless, with PoC and public exploit code showing authenticated access can trigger code execution on affected devi...

CVE-2021-43159: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the setSessionTime function in /cgi-bin/luci/api/common...

PT-2022-11800

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation via the checkNet function in the "/cgi-bin/luci/api/auth" AP...

CVE-2021-43161: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch...

CVE-2021-43162: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose...

CVE-2021-43164: Improper Neutralization of Special Elements used in an OS Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless...

PT-2022-11796

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation. The issue is related to the setSessionTime function in the...

PT-2022-11799

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential code execution. The issue is related to the runPackDiagnose function in t...

CVE-2021-43163: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the checkNet function in /cgi-bin/luci/api/auth...

PT-2022-11798

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential code execution. The issue is related to the doSwitchApi function in the...

CVE-2021-43160: Improper Neutralization of Special Elements used in a Command

A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose...

PT-2022-11797

Name of the Vulnerable Software and Affected Versions Ruijie Networks Ruijie RG-EW Series Routers versions up to ReyeeOS 1.55.1915 / EW 3.01B11P55 Description A Remote Code Execution RCE issue exists, allowing for potential exploitation via the switchFastDhcp function in the...

GHSA-9RJ9-5WCV-XGF2 Roundup Improper Access Control

The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as...

PHP sapi/cgi/cgi_main.c Code Execution

The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter is related to the lack of validation for the sequences of XML objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PHP CGI Interpreter Disclosure Data Compromise

The vulnerability of the cgi component sapi/cgi/cgimain.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information, compromise data integrity, or cause service failures...

CVE-2021-40680

There is a Directory Traversal vulnerability in Artica Proxy 4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273 via the filename parameter to /cgi-bin/main.cgi...

Directory traversal

There is a Directory Traversal vulnerability in Artica Proxy 4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273 via the filename parameter to /cgi-bin/main.cgi...

CVE-2021-40680

There is a Directory Traversal vulnerability in Artica Proxy 4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273 via the filename parameter to /cgi-bin/main.cgi...