426 matches found
CVE-2023-46562
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg...
CVE-2023-46554
TOTOLINK X2000R Gh firmware 1.0.0-B20230221.0948.web contains a stack overflow in the formMapDel function. The issue is documented across multiple sources as a stack overflow vulnerability affecting this version, with CVSS-derived impact on confidentiality, integrity, and availability marked high...
CVE-2023-46553
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl...
CVE-2023-46548
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect...
CVE-2023-46552
TOTOLINK X2000R Gh firmware v1.0.0-B20230221.0948.web contains a stack overflow in the formMultiAP function. Some sources describe potential for arbitrary code execution and DoS; others only cite a stack overflow. A PT-Security advisory recommends disabling the formMultiAP function as a temporary...
TOTOLINK X2000R 缓冲区错误漏洞
TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formStats method faili...
CVE-2023-46546
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats...
CVE-2023-46540
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack/buffer overflow in the formNtp function. The issue can allow arbitrary code execution or denial of service (per multiple sources) and is documented as a high-severity vulnerability. Some sources suggest a temporary mitigation by ...
CVE-2023-46551
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl...
CVE-2023-46558
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice...
CVE-2023-46553
CVE-2023-46553 affects TOTOLINK X2000R Gh firmware v1.0.0-B20230221.0948.web, with a stack overflow in the formParentControl function due to input validation issues. Documented impacts include potential arbitrary code execution or denial-of-service. A temporary workaround from PT-2023-30083 sugge...
CVE-2023-46543
CVE-2023-46543 affects TOTOLINK X2000R Gh; a stack overflow in the function formWlSiteSurvey on firmware 1.0.0-B20230221.0948.web. Underlying issue: stack overflow in formWlSiteSurvey, with high impact to confidentiality, integrity, and availability (CVSS 3.1: base scores up to 9.8). Exploitation...
CVE-2023-46547
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog...
CVE-2023-46544
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl...
CVE-2023-46547
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack overflow in the formSysLog function. The root cause is improper validation of input length/size in formSysLog, enabling a stack overflow that can lead to arbitrary code execution or denial of service. Affected product: TOTOLINK X...
CVE-2023-2735
The Groundhogg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ghform' shortcode in versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
CVE-2023-2735
The Groundhogg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ghform' shortcode in versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...
Fedora: Security Advisory for gh (FEDORA-2023-cb20f08a4e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-github-cli-gh (FEDORA-2023-cb20f08a4e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
