Lucene search
+L

8008 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:17 a.m.14 views

CVE-2022-29640

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

7.8CVSS7.6AI score0.01157EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:12 a.m.13 views

CVE-2022-32310

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request to /isms/classes/Users.php...

9.8CVSS6.8AI score0.01611EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:58 a.m.10 views

CVE-2022-46552

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

8.8CVSS7.5AI score0.10503EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:20 a.m.14 views

CVE-2022-4275

A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument searchproperty leads to sql injection. The attack ca...

9.8CVSS7.5AI score0.00628EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:18 a.m.13 views

CVE-2022-45725

Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target via an HTTP POST request...

8.8CVSS7.9AI score0.06946EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:06 a.m.9 views

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

8.8CVSS7.5AI score0.00549EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:06 a.m.8 views

CVE-2022-25471

An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...

8.1CVSS6.6AI score0.00844EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:04 a.m.19 views

CVE-2022-25095

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request...

9.8CVSS6.9AI score0.01373EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.13 views

The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.

The vulnerability of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...

5.3CVSS5.9AI score0.00564EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.11 views

The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality...

9CVSS7.6AI score0.00792EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.11 views

The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

9CVSS7.6AI score0.00792EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.10 views

The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers allows a perpetrator to execute arbitrary code.

The vulnerability of the /boafrm/formDMZ file in the HTTP POST Request Handler of the microprogramming software for TOTOLINK A702R, A3002R, and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...

9CVSS8AI score0.00792EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.10 views

The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router’s microprogramming system allows a attacker to cause a service failure.

The vulnerability of the setUPnPCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted POST...

5.3CVSS5.9AI score0.00582EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.10 views

The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system allows a intruder to cause a service failure.

The vulnerability of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router microprogramming system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending a speciall...

5.3CVSS5.9AI score0.00557EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.15 views

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSysCmd file in the microprogramming system for routers A702R, A3002R, and A3002RU allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSysCmd file in the microprogramming system for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker...

9CVSS7.7AI score0.00792EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.13 views

The vulnerability of the HTTP POST Request Handler component, sub_40BE30, in the microprogramming software of the A702R, A3002R, and A3002RU routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component, sub40BE30 in the microprogramming software of the A702R, A3002R, and A3002RU routers, involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

9CVSS7.7AI score0.00792EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.8 views

The vulnerability of the HTTP POST Request Handler component in the microprogramming software for TOTOLINK A3002R and A3002RU allows a perpetrator to execute arbitrary commands.

The vulnerability of the HTTP POST Request Handler component in the microprogramming software of TOTOLINK A3002R and A3002RU devices is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands using the...

6.5CVSS7.1AI score0.0116EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.16 views

The vulnerability of the HTTP POST Request Handler component of the /boafrm/formSaveConfig file in the microprogramming software for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component in the /boafrm/formSaveConfig file of the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

9CVSS7.7AI score0.00792EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.12 views

The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.

The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted PO...

5.3CVSS5.9AI score0.01261EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 11:38 p.m.7 views

CVE-2022-41444

Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php...

6.1CVSS5.7AI score0.00733EPSS
SaveExploits1References1
Rows per page
Query Builder