Lucene search
+L

369 matches found

NVD
NVD
added 2022/12/23 7:15 p.m.21 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS0.20185EPSS
Exploits1References1
Prion
Prion
added 2022/12/23 7:15 p.m.17 views

Command injection

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

7.5CVSS9.8AI score0.20185EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/23 12:0 a.m.7 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

8.2AI score0.20185EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/12/23 12:0 a.m.27 views

CVE-2022-45711

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

10AI score0.20185EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/12/23 12:0 a.m.5 views

IP-COM M50 操作系统命令注入漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in the IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS8.3AI score0.20185EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/12/23 12:0 a.m.4 views

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in the IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS8.6AI score0.01056EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/12/23 12:0 a.m.8 views

CVE-2022-45706

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function...

8.1AI score0.01056EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/23 12:0 a.m.9 views

PT-2022-27620 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered in the formSetNetCheckTools function via the hostname parameter. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to th...

9.8CVSS9.6AI score0.01056EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/12/23 12:0 a.m.7 views

PT-2022-27625 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A command injection issue was found via the hostname parameter in the formSetNetCheckTools function. This allows for potential command injection attacks. Recommendations: For IP-COM M50 version...

9.8CVSS9.6AI score0.20185EPSS
Exploits1References3
CVE
CVE
added 2022/12/23 12:0 a.m.46 views

CVE-2022-45711

Affected product: IP-COM M50 router, version 15.11.0.33(10768). Vulnerability: command injection via the hostname parameter in the formSetNetCheckTools function. Root cause / impact: underlying issue allows arbitrary command execution with network access, with high impact across confidentiality, ...

9.8CVSS9.7AI score0.20185EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/01 12:0 a.m.10 views

PT-2022-26501 · Unknown · C-Data Web Management System

Name of the Vulnerable Software and Affected Versions: C-DATA Web Management System affected versions not specified Description: A critical issue affects the C-DATA Web Management System, specifically the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the...

9.8CVSS9.5AI score0.4393EPSS
Exploits1References6
CNNVD
CNNVD
added 2022/12/01 12:0 a.m.6 views

C-DATA Web Management System 操作系统命令注入漏洞

C-DATA Web Management System is a web management system from the Chinese company C-DATA. The C-DATA Web Management System suffers from an operating system command injection vulnerability that stems from a problem with the unknown handling of the cgi-bin/jumpto.php file in the component GET...

9.8CVSS8.3AI score0.4393EPSS
Exploits1References3
CNVD
CNVD
added 2022/11/25 12:0 a.m.4 views

TOTOLINK NR1800X setOpModeCfg Function Command Injection Vulnerability

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE broadband access device from China's Gion Electronics TOTOLINK, which is mainly used for the deployment of NR fixed data services in homes and offices to support 5G NR network connectivity. A command injection vulnerability exists in the TOTOLI...

9.8CVSS8.6AI score0.0181EPSS
Exploits1References1
OSV
OSV
added 2022/11/23 4:15 p.m.4 views

CVE-2022-44250

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

9.8CVSS5.8AI score0.0181EPSS
Exploits1References1
Prion
Prion
added 2022/11/23 4:15 p.m.14 views

Command injection

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

7.5CVSS9.7AI score0.0181EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/23 12:0 a.m.7 views

CVE-2022-44250

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

7.5AI score0.0181EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.5 views

PT-2022-27149 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: The issue concerns a command injection via the hostName parameter in the setOpModeCfg function. This allows for potential exploitation. No information is provided about the estimated...

9.8CVSS9.5AI score0.0181EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/11/23 12:0 a.m.6 views

TOTOLINK NR1800X 操作系统命令注入漏洞

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE broadband access device from China's Gion Electronics TOTOLINK, which is mainly used for the deployment of NR fixed data services in homes and offices to support 5G NR network connectivity. A command injection vulnerability exists in the TOTOLI...

9.8CVSS8.5AI score0.0181EPSS
Exploits1References2
NVD
NVD
added 2022/11/15 2:15 a.m.26 views

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

7.8CVSS0.0103EPSS
Exploits1References1
OSV
OSV
added 2022/11/15 2:15 a.m.7 views

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

7.8CVSS6AI score0.0103EPSS
Exploits1References1
Rows per page
Query Builder