Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-41069

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01402EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:3 a.m.5 views

CVE-2023-37149

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function...

9.8CVSS8AI score0.01402EPSS
Exploits1
OSV
OSV
added 2024/07/29 5:15 a.m.1 views

CVE-2024-7183

A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182B20201102. Affected is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. It is possible to launch the attack remotely. The...

8.8CVSS6.1AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/01/07 12:0 a.m.2 views

PT-2024-1058 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB version 9.1.0u.6619 B20230130 Description: A critical vulnerability was found in the Totolink LR1200GB router's software. The issue affects the setUploadSetting function of the /cgi-bin/cstecgi.cgi file. The manipulation of...

10CVSS7.4AI score0.02748EPSS
Exploits1References9
NVD
NVD
added 2023/07/07 2:15 p.m.12 views

CVE-2023-37149

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function...

9.8CVSS9.8AI score0.01402EPSS
Exploits1References1
Prion
Prion
added 2023/07/07 2:15 p.m.16 views

Command injection

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function...

7.5CVSS9.8AI score0.01402EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/07/07 12:0 a.m.35 views

CVE-2023-37149

TOTOLINK LR350 firmware version V9.3.5u.6369_B20220309 contains a command injection vulnerability in the setUploadSetting function, exploitable via the FileName parameter. CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Impacts confidentiality, integrity, and availabilit...

9.8CVSS9.7AI score0.01402EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/07 12:0 a.m.7 views

CVE-2023-37149

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function...

8AI score0.01402EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/07/07 12:0 a.m.15 views

CVE-2023-37149

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function...

10AI score0.01402EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/03/15 12:0 a.m.2 views

PT-2022-17724 · Totolink · Totolink A810R +5

Name of the Vulnerable Software and Affected Versions: Totolink A830R version 5.9c.4729 B20191112 Totolink A3100R version 4.1.2cu.5050 B20200504 Totolink A950RG version 4.1.2cu.5161 B20200903 Totolink A800R version 4.1.2cu.5137 B20200730 Totolink A3000RU version 5.9c.5185 B20201128 Totolink A810R...

9.8CVSS9.9AI score0.17336EPSS
Exploits1References2
Rows per page
Query Builder