127 matches found
CVE-2022-44843
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...
CVE-2022-44843
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...
Command injection
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...
CVE-2022-44843
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...
CVE-2022-44843
The CVE-2022-44843 entry applies to TOTOLINK A7100RU devices (firmware around V7.4cu.2313_B20191024). The vulnerability is a command injection in the OpenVPN client configuration routine, exploitable via the port parameter in the setting/setOpenVpnClientCfg function. CVSS 3.1 base score 9.8 (Impa...
PT-2022-27322 · Totolink · Totolink A7100Ru
Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was found via the port parameter in the setting/setOpenVpnClientCfg function. This allows for potential command injection attacks. Recommendations: For...
CVE-2022-44843: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function...
CVE-2021-36668
URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App...
CVE-2021-36668
URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App...
CVE-2021-36668: Improper Neutralization of Special Elements in Output Used by a Downstream Component
URL injection in Driva inSync 6.9.0 for MacOS, allows attackers to force a visit to an arbitrary url via the port parameter to the Electron App...
Druva 注入漏洞
Druva is a large-scale SaaS platform from US-based Druva, Inc. bringing the simplicity, scalability and security of the public cloud to enterprise data protection and management. A security vulnerability exists in Druva version 6.9.0 that stems from a URL injection vulnerability in the inSync...
PT-2022-10534
Name of the Vulnerable Software and Affected Versions Driva inSync version 6.9.0 Description The issue allows attackers to force a visit to an arbitrary URL via the port parameter to the Electron App, which is a form of URL injection. Recommendations For Driva inSync version 6.9.0, consider...
CVE-2022-26641
TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
Design/Logic Flaw
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
CVE-2021-37389
Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter...
Chamilo LMS 跨站脚本漏洞
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question and answer sessions. Chamilo LMS suffers from a cross-site scripting vulnerability that allows a...