Lucene search
+L

1790 matches found

OSV
OSV
added 2022/11/08 6:15 p.m.10 views

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/08 6:15 p.m.31 views

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

5.3CVSS0.00443EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/08 6:15 p.m.31 views

Sql injection

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

5CVSS5.6AI score0.00443EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/11/08 12:0 a.m.72 views

CVE-2022-39069

ZTE ZAIP-AIE is affected by CVE-2022-39069, a SQL injection vulnerability caused by insufficient input verification on the server. The issue can allow an attacker to construct malicious requests, potentially leaking content from the current table. The CVE has a medium severity (CVSS v3.1 base sco...

5.3CVSS5.6AI score0.00443EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/08 12:0 a.m.11 views

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

5.6AI score0.00443EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.14 views

PT-2022-24710 · Zte · Zaip-Aie

Name of the Vulnerable Software and Affected Versions: ZTE ZAIP-AIE affected versions not specified Description: The issue is related to a SQL injection vulnerability. Due to the lack of input verification by the server, an attacker could trigger an attack by building malicious requests. This cou...

5.3CVSS5.4AI score0.00443EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/11/08 12:0 a.m.33 views

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

5.9AI score0.00443EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/09/28 12:0 a.m.44 views

ZTE ZXvSTB License Issue Vulnerability

ZTE ZXvSTB is a cloud-enabled set-top box from China's ZTE. The ZTE ZXvSTB suffers from an authorization issue vulnerability that stems from improper privilege control, which can be exploited by an attacker to remove the default application type and affect the normal use of the system...

9.1CVSS9.3AI score0.00697EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/23 3:15 p.m.24 views

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system...

9.1CVSS0.00697EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/23 3:15 p.m.14 views

Improper access control

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system...

6.4CVSS8.9AI score0.00697EPSS
SaveExploits0References1Affected Software15
CVE
CVE
added 2022/09/23 2:11 p.m.50 views

CVE-2022-23144

CVE-2022-23144 affects ZTE ZXvSTB. The vulnerability is described as broken access control due to improper permission control, enabling an attacker to delete the default application type and disrupt normal system use. CVSS v3.1 base score 9.1 (CRITICAL) with network attack vector, no user interac...

9.1CVSS9AI score0.00697EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/23 2:11 p.m.7 views

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system...

9.1AI score0.00697EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/23 2:11 p.m.29 views

CVE-2022-23144

There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the default application type, which affects normal use of system...

9.3AI score0.00697EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.5 views

ZTE ZXvSTB 安全漏洞

ZTE ZXvSTB is a cloud-enabled set-top box from China's ZTE. The ZTE ZXvSTB suffers from an authorization issue vulnerability that stems from improper privilege control, which can be exploited by an attacker to remove the default application type and affect the normal use of the system...

9.1CVSS6.9AI score0.00697EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/07/20 12:0 a.m.29 views

ZTE ZXEN CG200 Denial of Service Vulnerability

The ZTE ZXEN CG200 is a government and enterprise gateway device from China's ZTE Corporation ZTE. A denial of service vulnerability exists in ZXEN CG200 V1.0.0P1N5M and previous versions, which stems from improper handling of a large number of message requests. An attacker can exploit the...

5.3CVSS5.2AI score0.00668EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/19 12:0 a.m.28 views

ZTE ZXMP M721 Information Disclosure Vulnerability

The ZTE ZXMP M721 is a metro edge OTN Optical Transport Network device from ZTE, China. An information leakage vulnerability exists in the ZTE ZXMP M721 commond21bootv100004ls1045 version. The vulnerability stems from the fact that although the serial authentication of the ZBOOT interface is...

7.5CVSS7.4AI score0.00737EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.12 views

ZTE ZXMP M721 日志信息泄露漏洞

The ZTE ZXMP M721 is a metro edge OTN Optical Transport Network device from ZTE, China. An information leakage vulnerability exists in the ZTE ZXMP M721 commond21bootv100004ls1045 version. The vulnerability stems from the fact that although the serial authentication of the ZBOOT interface is...

7.5CVSS5.7AI score0.00737EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/06/13 12:0 a.m.50 views

ZTE MF297D Information Disclosure Vulnerability

The ZTE MF297D is a 4G wireless router from China's ZTE ZTE. The ZTE MF297D suffers from an information disclosure vulnerability that stems from the presence of a password problem vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

7.5CVSS6.3AI score0.00872EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/09 3:15 p.m.5 views

CVE-2022-23138

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack...

7.5CVSS7.1AI score0.00872EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/09 3:15 p.m.5 views

CVE-2022-23138

ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack...

7.5CVSS5.8AI score0.00872EPSS
SaveExploits0References1
Rows per page
Query Builder