Lucene search
+L

1379 matches found

CNNVD
CNNVD
added 2025/07/01 12:0 a.m.6 views

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU version 3.0.0-B20230809.1615 suffers from a buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formWlSiteSurvey failing to correctly validate t...

9CVSS8.1AI score0.00776EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.4 views

TOTOLINK A702r 安全漏洞

The TOTOLINK A702r is a router device from China's Gion Electronics TOTOLINK. The TOTOLINK A702r version 4.0.0-B20230721.1521 suffers from a buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formParentControl that fails to validate the length and si...

9CVSS8.1AI score0.0078EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/01 12:0 a.m.9 views

TOTOLINK A3002RU 安全漏洞

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU suffers from a buffer overflow vulnerability, which originates from the failure of the parameter submit-url in the file /boafrm/formParentControl to correctly validate the length and size of...

9CVSS8AI score0.00779EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/06/29 12:6 p.m.7 views

CVE-2025-28988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through = 4.9.3...

7.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/28 9:15 p.m.14 views

CVE-2025-6825

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

8.7CVSS6.4AI score0.00806EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/28 8:15 p.m.14 views

CVE-2025-6824

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible ...

7.5CVSS6.2AI score0.00804EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/28 12:0 a.m.6 views

TOTOLINK X15 安全漏洞

TOTOLINK X15 is a network wireless extender manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from improper handling of the submit-url parameter in the /boafrm/formParentControl file in the HTTP POST request handling...

9CVSS8AI score0.00804EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/28 12:0 a.m.3 views

TOTOLINK A702r 安全漏洞

The TOTOLINK A702R is a router device manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from improper handling of the submit-url parameter in the /boafrm/formWlSiteSurvey file in the HTTP POST request handling...

9CVSS7.7AI score0.00806EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/27 1:16 p.m.6 views

OESA-2025-1667 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount During the unmount path, at closectree, we first stop the cleaner kthread, usi...

7.8CVSS6.2AI score0.00207EPSS
SaveExploits0References4
NVD
NVD
added 2025/06/27 12:15 p.m.6 views

CVE-2025-28988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through = 4.9.3...

7.1CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 11:52 a.m.5 views

CVE-2025-28988 WordPress WP Front User Submit / Front Editor plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through = 4.9.3...

7.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/27 11:52 a.m.23 views

CVE-2025-28988

CVE-2025-28988 is a reflected Cross-Site Scripting (XSS) in the WordPress plugin WP Front User Submit / Front Editor, affecting versions up to 4.9.3. The issue stems from improper input neutralization during web page generation, enabling a reflected XSS that requires user interaction and has CVSS...

7.1CVSS5.9AI score0.00222EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.31 views

TOTOLINK A702R Buffer Overflow Vulnerability (CNVD-2025-14524)

The TOTOLINK A702R is a router device manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A702R suffers from a buffer overflow vulnerability that stems from the improper handling of the parameter submit-url in the file /boafrm/formIpv6Setup. No detailed vulnerability details are...

9CVSS8.9AI score0.03362EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.4 views

WordPress plugin WP Front User Submit / Front Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/25 12:0 a.m.3 views

TOTOLINK A702r 安全漏洞

The TOTOLINK A702R is a router device manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A702R suffers from a buffer overflow vulnerability that stems from the improper handling of the parameter submit-url in the file /boafrm/formIpv6Setup. No detailed vulnerability details are...

9CVSS7.3AI score0.03362EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.7 views

WordPress plugin Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.5CVSS6.9AI score0.00456EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.7 views

TOTOLINK EX1200T 安全漏洞

The TOTOLINK EX1200T is a dual-band wireless signal amplifier that is primarily used to extend the coverage of an existing wireless network. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that stems from the HTTP POST request handler mishandling the parameter submit-url. No...

9CVSS7.2AI score0.00807EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2025/06/24 12:0 a.m.11 views

The vulnerability in the embedded web server microprogramming software of TOTOLINK A3002R, A3002RU, A702R, and EX1200T routers allows a hacker to induce a service failure.

The vulnerability in the embedded web server microprogramming software of TOTOLINK A3002R, A3002RU, A702R, and EX1200T routers is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor t...

9CVSS7.9AI score0.00829EPSS
SaveExploits1References10Affected Software4
RedhatCVE
RedhatCVE
added 2025/06/23 8:39 a.m.9 views

CVE-2025-52795

Cross-Site Request Forgery CSRF vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Cross Site Request Forgery.This issue affects WP Front User Submit / Front Editor: from n/a through = 5.0.6...

7.1CVSS5.9AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/22 12:0 a.m.6 views

TOTOLINK A3002R 安全漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a stack buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formWlanMultipleAP failing to correctly validate the length and size of the input...

9CVSS8.1AI score0.00776EPSS
SaveExploits1References2
Rows per page
Query Builder