Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 5 days ago6 views

PT-2026-45921

The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input...

8.1CVSS6AI score0.00105EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.1 views

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stballvlans parameter of the getIptvInfo method failing to correctly validate the length of the input data, and can be exploited b...

9.8CVSS8.2AI score0.00255EPSS
Exploits1References2
NVD
NVD
added 2023/01/26 9:15 p.m.6 views

CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

7.8CVSS7.8AI score0.00351EPSS
Exploits1References2
OSV
OSV
added 2023/01/26 9:15 p.m.1 views

CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

7.8CVSS5.8AI score0.00351EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/01/26 12:0 a.m.2 views

smartctl 安全漏洞

smartctl is a command line application by Manuel B. Personal Developer. A security vulnerability exists in smartctl that stems from incorrect input cleanup, which can be exploited by an attacker to perform command injection via the info method...

7.8CVSS7.4AI score0.00351EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/01/25 5:0 a.m.13 views

CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

7.4CVSS8.1AI score0.00351EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/01/25 12:0 a.m.2 views

PT-2023-12672 · Smartctl · Smartctl

Name of the Vulnerable Software and Affected Versions: smartctl versions all Description: The issue is related to Command Injection via the info method due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated number of potentially...

7.8CVSS7.6AI score0.00351EPSS
Exploits1References6
CNVD
CNVD
added 2017/07/14 12:0 a.m.1 views

Hanchao B2B2C Multi-User Mall System info method has SQL injection vulnerability

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall Systeminfo method exists SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

8.1AI score
Exploits0
Rows per page
Query Builder