3805 matches found
CVE-2025-26054
Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...
CVE-2025-26054
Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...
Infinxt iEdge 100 跨站脚本漏洞
Infinxt iEdge 100 is a next-generation secure SD-WAN appliance for small and medium-sized branch offices from Infinxt. A cross-site scripting vulnerability exists in Infinxt iEdge 100 version 2.1.32, which originates from cross-site scripting in the description field in the LAN configuration...
CVE-2025-26054
Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...
CVE-2025-26054
CVE-2025-26054 affects Infinxt iEdge 100 (version 2.1.32). The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the Description field during LAN configuration, caused by unsanitized user-controlled input in that field. CVSS v3.1 base score 5.4 (Medium) with Network attack vector...
CVE-2025-27726
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file download process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a...
CVE-2025-27574
Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only...
CVE-2025-27718
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or...
CVE-2025-27716
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered...
CVE-2025-27574
Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only...
CVE-2025-27726
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file download process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a...
CVE-2025-27726
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file download process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered by a...
CVE-2025-27718
The CVE-2025-27718 entry concerns the HGW-BL1500HM router family (Ver 002.002.003 and earlier) with a Path Traversal vulnerability in the USB storage file-sharing function. The root cause is improper limitation of a pathname to a restricted directory, enabling a crafted HTTP request from a LAN-co...
CVE-2025-27716
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered...
CVE-2025-27716
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered...
CVE-2025-27574
CVE-2025-27574: A stored cross-site scripting (XSS) flaw in the USB storage file-sharing function affects HGW-BL1500HM versions 002.002.003 and earlier. Exploitation could cause arbitrary script execution in the web browser of the user interfacing with the configuration page or LAN-accessible UI....
CVE-2025-27567
Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from t...
CVE-2025-27567
Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only from t...
CVE-2025-27567
HGW-BL1500HM (KDDI) contains a stored cross-site scripting (CWE-79) vulnerability in the NickName registration screen for Ver 002.002.003 and earlier. If exploited, an arbitrary script may be executed in the web browser of the user using the configuration page or functions accessible from the LAN...
