Lucene search
+L

2312 matches found

CNNVD
CNNVD
•added 2022/07/25 12:00 a.m.•17 views

WAVLINK WN535 G3 安全漏洞

The WAVLINK WN535 G3 is a wireless router from China-based RuiYin Technology WAVLINK. A security vulnerability exists in the WAVLINK WN535 G3's firmware version M35G3R.V5030.180927, which stems from its adm.cgi component that allows an attacker to execute arbitrary code via a crafted POST request...

9.8CVSS8.8AI score0.0244EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/25 12:00 a.m.•8 views

CVE-2022-34576: Undefined Security Weakness

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

7.5CVSS7.7AI score0.03893EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/07/25 12:00 a.m.•18 views

PT-2022-22216 · Wavlink · Wavlink Wn535G3

Name of the Vulnerable Software and Affected Versions: WAVLINK WN535 G3 version M35G3R.V5030.180927 Description: A vulnerability in the adm.cgi component allows attackers to execute arbitrary code via a crafted POST request. Recommendations: For WAVLINK WN535 G3 version M35G3R.V5030.180927,...

10CVSS9.5AI score0.02954EPSS
SaveExploits2References3
CNVD
CNVD
•added 2022/07/22 12:00 a.m.•107 views

WAVLINK WN530HG4 Trust Management Issue Vulnerability

The WAVLINK WN530HG4 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WN530HG4 M30HG4.V5030.191116 version, which originates from a hard-coded encryption/decryption key contained in the configuration file of xportAllSettings.sh. No details of the...

9.8CVSS9.5AI score0.03364EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/20 5:15 p.m.•11 views

CVE-2022-34049

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...

5.3CVSS5.9AI score0.02748EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/07/20 5:15 p.m.•8 views

CVE-2022-34045

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etcro/lighttpd/www/cgi-bin/ExportAllSettings.sh...

9.8CVSS5.9AI score0.03364EPSS
SaveExploits1References3
OSV
OSV
•added 2022/07/20 5:15 p.m.•17 views

CVE-2022-34049

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...

5.3CVSS5.8AI score0.02748EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/20 5:15 p.m.•13 views

CVE-2022-34048

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting XSS vulnerability via the loginpage parameter...

6.1CVSS5.8AI score0.06722EPSS
SaveExploits4References4
OSV
OSV
•added 2022/07/20 5:15 p.m.•16 views

CVE-2022-34047

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd...

7.5CVSS5.8AI score0.22194EPSS
SaveExploits4References2
attackerkb
attackerkb
•added 2022/07/20 5:15 p.m.•13 views

CVE-2022-34047

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd...

7.5CVSS5.9AI score0.22194EPSS
SaveExploits4References4
OSV
OSV
•added 2022/07/20 5:15 p.m.•15 views

CVE-2022-34045

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etcro/lighttpd/www/cgi-bin/ExportAllSettings.sh...

9.8CVSS5.8AI score0.03364EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/20 5:15 p.m.•13 views

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

7.5CVSS5.9AI score0.21124EPSS
SaveExploits4References4
OSV
OSV
•added 2022/07/20 5:15 p.m.•19 views

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

7.5CVSS5.8AI score0.21124EPSS
SaveExploits4References2
OSV
OSV
•added 2022/07/20 5:15 p.m.•14 views

CVE-2022-34048

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting XSS vulnerability via the loginpage parameter...

6.1CVSS5.7AI score0.06722EPSS
SaveExploits4References2
NVD
NVD
•added 2022/07/20 5:15 p.m.•34 views

CVE-2022-34045

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etcro/lighttpd/www/cgi-bin/ExportAllSettings.sh...

9.8CVSS0.03364EPSS
SaveExploits1References1
NVD
NVD
•added 2022/07/20 5:15 p.m.•54 views

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

7.5CVSS0.21124EPSS
SaveExploits4References2
NVD
NVD
•added 2022/07/20 5:15 p.m.•34 views

CVE-2022-34049

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...

5.3CVSS0.02748EPSS
SaveExploits1References2
NVD
NVD
•added 2022/07/20 5:15 p.m.•44 views

CVE-2022-34047

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd...

7.5CVSS0.22194EPSS
SaveExploits4References2
NVD
NVD
•added 2022/07/20 5:15 p.m.•41 views

CVE-2022-34048

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting XSS vulnerability via the loginpage parameter...

6.1CVSS0.06722EPSS
SaveExploits4References2
Prion
Prion
•added 2022/07/20 5:15 p.m.•16 views

Cross site scripting

Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting XSS vulnerability via the loginpage parameter...

5.8CVSS6AI score0.06722EPSS
SaveExploits4References2Affected Software1
Rows per page
Query Builder