Lucene search
+L

17250 matches found

Cvelist
Cvelist
added 2024/01/17 7:15 a.m.31 views

CVE-2023-51735 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Pre-shared key parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

6.9CVSS6.5AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/17 7:15 a.m.4 views

CVE-2023-51735 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Pre-shared key parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

6.9CVSS6.5AI score0.00358EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/17 7:15 a.m.25 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Hostname parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interfac...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.19 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 1 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.23 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.22 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.18 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.16 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Server Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.20 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.19 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.22 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.20 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Description parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2024/01/17 7:15 a.m.20 views

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Traceroute parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

4.9CVSS6.1AI score0.00358EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/17 7:13 a.m.50 views

CVE-2023-51734

CVE-2023-51734 affects Skyworth Router CM5100, version 4.1.1.24. The issue originates from insufficient validation of the Identity parameter in the web interface’s Remote endpoint settings, enabling a remote attacker to supply crafted input that can trigger a stored XSS vulnerability. The availab...

6.9CVSS5.3AI score0.00358EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/01/17 7:11 a.m.54 views

CVE-2023-51733

CVE-2023-51733 affects Skyworth Router CM5100 (v4.1.1.24). The issue is insufficient validation of the Identity parameter under Local endpoint settings in the web interface, allowing a remote attacker to supply crafted input and perform stored XSS on the target system. Connected CVE records confi...

6.9CVSS5.2AI score0.00358EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/17 7:11 a.m.58 views

CVE-2023-51733 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the...

6.9CVSS6.5AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/17 7:11 a.m.21 views

CVE-2023-51733 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the...

6.9CVSS5.9AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/17 7:07 a.m.9 views

CVE-2023-51732 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

6.9CVSS6.4AI score0.00358EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/17 7:07 a.m.30 views

CVE-2023-51732 Stored Cross Site Scripting Vulnerability in Skyworth Router

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web...

6.9CVSS6.5AI score0.00358EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/17 7:06 a.m.45 views

CVE-2023-51731

CVE-2023-51731 concerns Skyworth Router CM5100, firmware 4.1.1.24. The vulnerability arises from insufficient validation of the Hostname parameter on the web interface, enabling a remote attacker to inject input that could trigger a stored XSS payload on the targeted system. Exploitation is descr...

6.9CVSS5.2AI score0.00358EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder