Lucene search
+L

4399 matches found

OSV
OSV
added 2022/08/30 3:15 p.m.8 views

CVE-2022-37149

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter...

9.8CVSS6AI score0.02726EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/30 12:00 a.m.8 views

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6 AC1200 v5.0 Firmware v02.03.01.114 and below, which originates from a problem in the component /cgi-bin/DownloadFlash and allows attackers to steal all data, such as source code and system files, via a...

7.5CVSS7.2AI score0.00686EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/08/30 12:00 a.m.10 views

PT-2022-23462 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6AC1200 v5.0 Firmware versions v02.03.01.114 and below Description: The issue affects the /cgi-bin/DownloadFlash component, allowing attackers to steal data such as source code and system files via a crafted GET request...

7.5CVSS7.5AI score0.00686EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2022/08/29 12:15 a.m.5 views

CVE-2022-36613

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

7.8CVSS7.1AI score0.00296EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.8 views

Seiko Solutions SkyBridge MB-A100/A110 命令注入漏洞

The Seiko Solutions SkyBridge MB-A100/A110 is an LTE-compatible IoT router from Seiko Solutions, Japan. A security vulnerability exists in the Seiko Solutions SkyBridge MB-A100/A110 v4.2.0 and earlier, which stems from the ipAddress parameter being found to contain command injection...

9.8CVSS7.1AI score0.01584EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.7 views

Hytec Inter HWL-2511-SS 命令注入漏洞

The Hytec Inter HWL-2511-SS is an industrial LTE router and Wi-Fi access point from Hytec Inter, Japan. A security vulnerability exists in Hytec Inter HWL-2511-SS v1.05 and earlier, which stems from a CLI that allows attackers to execute arbitrary commands with root privileges...

9.8CVSS7.5AI score0.02374EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/08/28 5:15 p.m.5 views

CVE-2022-38564

Tenda M3 V1.0.0.124856 was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service DoS via the adItemUID parameter...

7.5CVSS6.1AI score0.00947EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/28 5:15 p.m.7 views

CVE-2022-38569

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow in the function formDelAd...

7.5CVSS5.9AI score0.00947EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/28 12:00 a.m.11 views

Belkin Linksys E1200 缓冲区错误漏洞

The Belkin Linksys E1200 is an E-Series wireless router from Belkin USA. A security vulnerability exists in the Belkin Linksys E1200 v1.0.04 that originates from a buffer overflow via ejgetwebpagename...

9.8CVSS7.3AI score0.0953EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/08/28 12:00 a.m.9 views

TOTOLINK A3000RU 信任管理问题漏洞

The TOTOLINK A3000Ru is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3000RU version V4.1.2cu.5185B20201128, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

7.8CVSS7AI score0.00296EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/08/28 12:00 a.m.7 views

D-Link GO-RT-AC750 安全漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China AUO D-Link. A security vulnerability exists in the D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02 versions, which stems from not checking the size on the stack...

9.8CVSS8.1AI score0.55531EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.4 views

CVE-2022-37804

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.6 views

CVE-2022-37810

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac...

9.8CVSS5.8AI score0.0244EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.5 views

CVE-2022-37798

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer...

9.8CVSS7.4AI score0.01147EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.12 views

CVE-2022-37813

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 3:15 p.m.5 views

CVE-2022-37812

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/25 3:15 p.m.9 views

CVE-2022-37809

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speeddir parameter in the function formSetSpeedWan...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.3 views

CVE-2022-37083

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setDiagnosisCfg...

7.8CVSS7.1AI score0.01046EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 3:15 p.m.9 views

CVE-2022-37077

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the pppoeUser parameter...

7.8CVSS5.8AI score0.00341EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.10 views

CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...

7.8CVSS7.1AI score0.01046EPSS
SaveExploits1References2
Rows per page
Query Builder