Lucene search
+L

425 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/23 12:00 a.m.•6 views

CVE-2022-45711: Improper Neutralization of Special Elements used in an OS Command

IP-COM M50 V15.11.0.3310768 was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function...

9.8CVSS5.9AI score0.20185EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/12/01 12:00 a.m.•15 views

C-DATA Web Management System 操作系统命令注入漏洞

C-DATA Web Management System is a web management system from the Chinese company C-DATA. The C-DATA Web Management System suffers from an operating system command injection vulnerability that stems from a problem with the unknown handling of the cgi-bin/jumpto.php file in the component GET...

9.8CVSS8.3AI score0.4393EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/01 12:00 a.m.•23 views

PT-2022-26501 · Unknown · C-Data Web Management System

Name of the Vulnerable Software and Affected Versions: C-DATA Web Management System affected versions not specified Description: A critical issue affects the C-DATA Web Management System, specifically the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the...

9.8CVSS9.5AI score0.4393EPSS
SaveExploits1References6
CNVD
CNVD
•added 2022/11/25 12:00 a.m.•14 views

TOTOLINK NR1800X setOpModeCfg Function Command Injection Vulnerability

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE broadband access device from China's Gion Electronics TOTOLINK, which is mainly used for the deployment of NR fixed data services in homes and offices to support 5G NR network connectivity. A command injection vulnerability exists in the TOTOLI...

9.8CVSS8.6AI score0.01816EPSS
SaveExploits1References1
OSV
OSV
•added 2022/11/23 4:15 p.m.•14 views

CVE-2022-44250

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

9.8CVSS5.8AI score0.01816EPSS
SaveExploits1References1
Prion
Prion
•added 2022/11/23 4:15 p.m.•21 views

Command injection

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

7.5CVSS9.7AI score0.01816EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/11/23 12:00 a.m.•16 views

TOTOLINK NR1800X 操作系统命令注入漏洞

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE broadband access device from China's Gion Electronics TOTOLINK, which is mainly used for the deployment of NR fixed data services in homes and offices to support 5G NR network connectivity. A command injection vulnerability exists in the TOTOLI...

9.8CVSS8.5AI score0.01816EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/11/23 12:00 a.m.•16 views

PT-2022-27149 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: The issue concerns a command injection via the hostName parameter in the setOpModeCfg function. This allows for potential exploitation. No information is provided about the estimated...

9.8CVSS9.5AI score0.01816EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/11/23 12:00 a.m.•9 views

CVE-2022-44250

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

7.5AI score0.01816EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/23 12:00 a.m.•4 views

CVE-2022-44250: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK NR1800X V9.1.0u.6279B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function...

9.8CVSS5.8AI score0.01816EPSS
SaveExploits1References3
OSV
OSV
•added 2022/11/15 2:15 a.m.•17 views

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

7.8CVSS6AI score0.00997EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/15 2:15 a.m.•35 views

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

7.8CVSS0.00997EPSS
SaveExploits1References1
Prion
Prion
•added 2022/11/15 2:15 a.m.•26 views

Command injection

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

4.3CVSS7.8AI score0.00997EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/11/15 12:00 a.m.•47 views

CVE-2022-40847

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

8.1AI score0.00997EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/15 12:00 a.m.•3 views

CVE-2022-40847: Improper Neutralization of Special Elements used in an OS Command

In Tenda AC1200 Router model W15Ev2 V15.11.0.101576, there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter...

7.8CVSS6.2AI score0.00997EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/11/15 12:00 a.m.•15 views

PT-2022-25578 · Tenda · Tenda Ac1200 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router version V15.11.0.101576 Description: The issue is related to a command injection vulnerability in the function formSetFixTools, allowing attackers to run arbitrary commands on the server via the hostname parameter...

7.8CVSS7.8AI score0.00997EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•18 views

Tenda AC1200 操作系统命令注入漏洞

The Tenda AC1200 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC1200 version 15.11.0.10, which is caused by a command injection vulnerability in the function formSetFixTools. The vulnerability allows an attacker to run arbitrary commands on the server via...

7.8CVSS7.6AI score0.00997EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/09/06 5:15 p.m.•9 views

CVE-2022-40112

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

7.5CVSS7.1AI score0.00829EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/06 5:15 p.m.•18 views

CVE-2022-40112

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

7.5CVSS5.8AI score0.00829EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/06 5:15 p.m.•29 views

CVE-2022-40112

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

7.5CVSS0.00829EPSS
SaveExploits0References1
Rows per page
Query Builder