Lucene search
+L

456 matches found

CNVD
CNVD
added 2024/03/22 12:0 a.m.4 views

TOTOLINK X2000R Cross-Site Scripting Vulnerability

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the application's lack of...

5.4CVSS6.6AI score0.00389EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.6 views

The vulnerability of the VPN server for microprogramming router Totolink X2000R, which allows attackers to perform cross-site scripting attacks

The vulnerability of the VPN server for microprogramming routers Totolink X2000R relates to the lack of measures taken to protect the website structure during the processing of the “Comment” input field. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attack...

10CVSS5.3AI score0.00389EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/21 12:0 a.m.12 views

CVE-2024-28402

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting XSS vulnerability in IP/Port Filtering under the Firewall Page...

5.9AI score0.00428EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/21 12:0 a.m.21 views

CVE-2024-28402

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting XSS vulnerability in IP/Port Filtering under the Firewall Page...

5.8AI score0.00428EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/03/21 12:0 a.m.6 views

PT-2024-22419 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to V1.0.0-B20231213.1013 Description: The issue is related to a Stored Cross-site scripting XSS vulnerability. This vulnerability is located in the IP/Port Filtering section under the Firewall Page. Stored XSS i...

5.9CVSS5.4AI score0.00428EPSS
Exploits1References4
CVE
CVE
added 2024/03/21 12:0 a.m.32 views

CVE-2024-28402

The CVE-2024-28402 entry relates to TOTOLINK X2000R before version 1.0.0-B20231213.1013, which contains a Stored Cross-Site Scripting (XSS) vulnerability in the IP/Port Filtering function within the Firewall page. The underlying issue is an XSS flaw in how user-supplied data is handled in that fi...

5.9CVSS5.8AI score0.00428EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/03/20 3:15 p.m.6 views

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

5.4CVSS5.8AI score0.00389EPSS
Exploits1References2
NVD
NVD
added 2024/03/20 3:15 p.m.29 views

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

5.4CVSS5.8AI score0.00389EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/03/20 12:0 a.m.7 views

PT-2024-22888 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R versions prior to v1.0.0-B20231213.1013 Description: The issue is related to a Cross-site scripting XSS vulnerability. This vulnerability is located in the Wireless settings under the Easy Setup Page. Recommendations: For...

5.4CVSS6.3AI score0.00389EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/03/20 12:0 a.m.14 views

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

6AI score0.00389EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/20 12:0 a.m.43 views

CVE-2024-29419

There is a Cross-site scripting XSS vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013...

6AI score0.00389EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/03/20 12:0 a.m.6 views

TOTOLINK X2000R 安全漏洞

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the application's lack of...

5.4CVSS6.2AI score0.00389EPSS
Exploits1References3
CVE
CVE
added 2024/03/20 12:0 a.m.79 views

CVE-2024-29419

TOTOLINK X2000R is affected by a Cross-site Scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page. The issue exists in versions prior to v1.0.0-B20231213.1013, with the likely impact being execution of arbitrary script within the device’s web UI. Remediation per PT-2024...

5.4CVSS6AI score0.00389EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2024/03/19 12:0 a.m.6 views

TOTOLINK X2000R VPN Page Page Cross-Site Scripting Vulnerability

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the lack of effective...

5.4CVSS6.6AI score0.00389EPSS
Exploits1References1
CNVD
CNVD
added 2024/03/19 12:0 a.m.5 views

TOTOLINK X2000R Cross-Site Scripting Vulnerability (CNVD-2025-15317)

TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics that supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion capabilities. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the lack of effective...

8CVSS6.6AI score0.0048EPSS
Exploits1References1
CNVD
CNVD
added 2024/03/19 12:0 a.m.3 views

TOTOLINK X2000R Wireless Page Page Cross-Site Scripting Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the Root Access Control under the Wireless Page page, which can ...

5.4CVSS6.6AI score0.00389EPSS
Exploits1References1
NVD
NVD
added 2024/03/15 5:15 p.m.24 views

CVE-2024-28401

TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting XSS vulnerability in Root Access Control under the Wireless Page...

5.4CVSS5.8AI score0.00389EPSS
Exploits1References2
OSV
OSV
added 2024/03/15 5:15 p.m.4 views

CVE-2024-28401

TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting XSS vulnerability in Root Access Control under the Wireless Page...

5.4CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2024/03/15 5:15 p.m.18 views

CVE-2024-28404

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting XSS vulnerability in MAC Filtering under the Firewall Page...

8CVSS5.7AI score0.0048EPSS
Exploits1References2
OSV
OSV
added 2024/03/15 5:15 p.m.9 views

CVE-2024-28404

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting XSS vulnerability in MAC Filtering under the Firewall Page...

8CVSS5.7AI score0.0048EPSS
Exploits1References2
Rows per page
Query Builder