272 matches found
PT-2022-19577
Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the comment parameter in the function FUN 004196c8. This issue affects the TOTOLINK N600R router. Recommendations For TOTOLINK N600R version...
CVE-2022-29397: Out-of-bounds Write
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN004196c8...
CVE-2022-29396: Out-of-bounds Write
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN00418f10...
CVE-2022-29393: Out-of-bounds Write
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN004192cc...
CVE-2022-29391: Out-of-bounds Write
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN004200c8...
TOTOLINK N600R 缓冲区错误漏洞
TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004196c8 function. An attacker could exploit this...
TOTOLINK N600R 缓冲区错误漏洞
TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...
TOTOLINK N600R 缓冲区错误漏洞
TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004192cc function. An attacker could exploit this...
PT-2022-19573
Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the comment parameter in the function FUN 004192cc. This issue affects the TOTOLINK N600R router. Recommendations For TOTOLINK N600R version...
CVE-2021-38488
Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code...
PT-2021-22161
Name of the Vulnerable Software and Affected Versions Delta Electronics DIALink versions 1.2.4.0 and prior Description The issue allows an authenticated attacker to inject arbitrary JavaScript code into the comment parameter of the API events, which may enable remote code execution. Recommendatio...
CVE-2020-23048
SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting XSS vulnerability in the component AddEvent.php via the name and comment parameters...
CVE-2020-23048: Improper Neutralization of Input During Web Page Generation
SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting XSS vulnerability in the component AddEvent.php via the name and comment parameters...
SeedDMS 跨站脚本漏洞
SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site scripting vulnerability exists in the AddEvent.php component in SeedDMS version 6.0.7. The vulnerability can be exploited to inject malicious script code via the name and comment parameters...
CVE-2021-27315
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...
CVE-2021-27315
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...
CVE-2021-27315
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...
CVE-2021-27315: Improper Neutralization of Special Elements used in an SQL Command
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter...
