1891 matches found
CVE-2022-37076
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...
CVE-2022-36486
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...
CVE-2022-36461
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...
Command injection
TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...
Command injection
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile...
Command injection
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg...
CVE-2022-37083
CVE-2022-37083 affects TOTOLINK A7000R (V9.1.0u.6115_B20201022). A command injection flaw exists via the ip parameter in setDiagnosisCfg. Impact per sources implies potential arbitrary command execution with high impact; CVSSv3.1 base score 7.8 (L, L, Phr, U). Exploitation status is not provided ...
CVE-2022-37081
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...
EUVD-2022-39723
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...
CVE-2022-36509
CVE-2022-36509 affects H3C GR3200 MiniGR1B0V100R014. The vulnerability is a command injection in the DelL2tpLNSList endpoint triggered via the param parameter. NVD CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW authentication/privilege requirements, and C/I/A HIGH. Connected sources...
CVE-2022-36487
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36482
CVE-2022-36482 applies to TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a command injection flaw exists in the function setLanguageCfg exposed through the lang parameter . The vulnerability could allow arbitrary command execution with local access and could impact confidentiality, integri...
CVE-2022-36458
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...
CVE-2022-36456
TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...
PT-2022-23401 · Totolink · Totolink N350Rt
Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the host time parameter in the NTPSyncWithHost function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...
EUVD-2022-35638
An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2022-35153
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...
get-npm-package-version 命令注入漏洞
get-npm-package-version is a package for hoperyy individual developers. It is used to get the npm package version. A command injection vulnerability exists in get-npm-package-version before 1.0.7, which is caused by command injection via the main function in index.js...
PT-2022-8886 · Unknown · Monorepo-Build
Name of the Vulnerable Software and Affected Versions: monorepo-build affected versions not specified Description: A command injection issue affects the package. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents whe...