CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

675 matches found

RedhatCVE•added 2026/02/24 1:44 a.m.•14 views

CVE-2025-70327

TOTOLINK X5000R v9.1.0cu2415B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable. The ip parameter is retrieved via websGetVar and passed to a ping command through CsteSystem without validating if the input starts with a hyphen...

9.8CVSS5.7AI score0.00693EPSS

SaveExploits1References1

RedhatCVE•added 2026/02/24 1:44 a.m.•11 views

CVE-2025-70329

TOTOLink X5000R v9.1.0cu2415B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1 and other vlanVidLanX parameters are retrieved via UciGetStr and passed to the CsteSystem function without adequate validation or...

8CVSS6AI score0.03183EPSS

SaveExploits1References1

CVE•added 2026/02/24 12:00 a.m.•27 views

CVE-2025-67445

CVE-2025-67445 affects TOTOLINK X5000R (v9.1.0cu.2415_B20250515) in the /cgi-bin/cstecgi.cgi CGI. The issue stems from reading CONTENT_LENGTH and calling malloc(CONTENT_LENGTH + 1) without proper bounds checks. A crafted large POST request can exhaust memory or cause a segmentation fault when the...

7.5CVSS5.5AI score0.00332EPSS

SaveExploits1References1Affected Software1

Vulnrichment•added 2026/02/24 12:00 a.m.•7 views

CVE-2025-67445

TOTOLINK X5000R V9.1.0cu.2415B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENTLENGTH environment variable and allocates memory using malloc CONTENTLENGTH + 1 without sufficient bounds checking. When lighttpd s request size limit is not enforce...

5.5AI score0.00332EPSS

SaveExploits1References2

CNNVD•added 2026/02/24 12:00 a.m.•24 views

TOTOLINK X5000R 安全漏洞

TOTOLINK X5000R is a router produced by TOTOLINK, a Chinese company. The TOTOLINK X5000R V9.1.0cu.2415B20250515 version contains a security vulnerability. This vulnerability stems from insufficient boundary checking of the CONTENTLENGTH environment variable in the /cgi-bin/cstecgi.cgi file. It ma...

7.5CVSS5.8AI score0.00332EPSS

SaveExploits1References2

Positive Technologies•added 2026/02/24 12:00 a.m.•21 views

PT-2026-21743

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu.2415 B20250515 Description The software contains a denial-of-service issue in the /cgi-bin/cstecgi.cgi component. The component reads the CONTENT LENGTH environment variable and allocates memory using malloc wit...

7.5CVSS6AI score0.00332EPSS

SaveExploits1References5

Cvelist•added 2026/02/24 12:00 a.m.•39 views

CVE-2025-67445

0.00332EPSS

SaveExploits1References1

NVD•added 2026/02/23 9:19 p.m.•22 views

CVE-2025-70327

9.8CVSS0.00693EPSS

SaveExploits1References2

OSV•added 2026/02/23 8:28 p.m.•23 views

CVE-2025-70329

8CVSS6.1AI score0.03183EPSS

SaveExploits1References2

NVD•added 2026/02/23 8:28 p.m.•20 views

CVE-2025-70329

8CVSS0.03183EPSS

SaveExploits1References2

Vulnrichment•added 2026/02/23 12:00 a.m.•3 views

CVE-2025-70327

5.7AI score0.00693EPSS

SaveExploits1References2

ATTACKERKB•added 2026/02/23 12:00 a.m.•5 views

CVE-2025-70327

9.8CVSS7.9AI score0.00693EPSS

SaveExploits1References3

Cvelist•added 2026/02/23 12:00 a.m.•43 views

CVE-2025-70327

0.00693EPSS

SaveExploits1References2

Cvelist•added 2026/02/23 12:00 a.m.•50 views

CVE-2025-70329

0.03183EPSS

SaveExploits1References2

Vulnrichment•added 2026/02/23 12:00 a.m.•7 views

CVE-2025-70329

6AI score0.03183EPSS

SaveExploits1References2

CNNVD•added 2026/02/23 12:00 a.m.•21 views

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK X5000R v9.1.0cu2415B20250515 version contains a security vulnerability. This vulnerability stems from insufficient validation of IP parameters in the setDiagnosisCfg processing program. It may allow...

9.8CVSS5.8AI score0.00693EPSS

SaveExploits1References2

Positive Technologies•added 2026/02/23 12:00 a.m.•13 views

PT-2026-21551

Name of the Vulnerable Software and Affected Versions TOTOLINK X5000R version 9.1.0cu 2415 B20250515 Description The software contains an argument injection flaw in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable. The ip parameter, obtained using websGetVar, is passed to a ping...

9.8CVSS5.5AI score0.00693EPSS

SaveExploits1References7

CVE•added 2026/02/23 12:00 a.m.•45 views

CVE-2025-70329

TOTOLink X5000R firmware version 9.1.0cu_2415_B20250515 contains an OS command injection in the setIptvCfg handler of /usr/sbin/lighttpd. The vlanVidLan1 (and other vlanVidLanX) values are retrieved via Uci_Get_Str and passed to CsteSystem without proper validation, enabling an authenticated atta...

8CVSS6AI score0.03183EPSS

SaveExploits1References2Affected Software1

VulnCheck KEV•added 2026/02/04 12:00 a.m.•161 views

VulnCheck KEV: CVE-2025-14586

A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible...

9.8CVSS5.6AI score0.02796EPSS

SaveIn wildExploits1References2

RedhatCVE•added 2026/01/09 12:34 p.m.•14 views

CVE-2023-45985

TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

7.5CVSS7.5AI score0.00718EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by