by Kastro CVE-2022-47071 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 584 of 786
mitre
CVE-2023-23333 · mitre
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restri…
CVE-2023-25135 · mitre
vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers d…
CVE-2023-24138 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHo…
CVE-2023-24139 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkD…
CVE-2023-24140 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetwo…
CVE-2023-24141 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setN…
CVE-2023-24142 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetw…
CVE-2023-24143 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNe…
CVE-2023-24144 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg f…
CVE-2023-24146 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg…
CVE-2023-24150 · mitre
A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to exe…
CVE-2023-24151 · mitre
A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers…
CVE-2023-24152 · mitre
A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to e…
CVE-2023-24153 · mitre
A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attac…
CVE-2023-24154 · mitre
TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.
CVE-2023-24156 · mitre
A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to exec…
CVE-2023-24157 · mitre
A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to ex…
CVE-2023-24145 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloa…
CVE-2023-24148 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserD…
CVE-2021-37497 · mitre
SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.
CVE-2021-37317 · mitre
Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers…
CVE-2021-37315 · mitre
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote at…
CVE-2023-24149 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow.
CVE-2023-24155 · mitre
TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi…
CVE-2022-48311 · mitre
**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Mode…
CVE-2021-36224 · mitre
Western Digital My Cloud devices before OS5 have a nobody account with a blank password.
CVE-2022-48021 · mitre
A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.
CVE-2022-48078 · mitre
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.
CVE-2023-23086 · mitre
Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function.
CVE-2023-23088 · mitre
Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via…
CVE-2023-24202 · mitre
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.
CVE-2021-36226 · mitre
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.
CVE-2023-23087 · mitre
An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.
CVE-2023-24198 · mitre
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw pa…
CVE-2023-24199 · mitre
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.
CVE-2023-24200 · mitre
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
CVE-2023-24201 · mitre
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
MediaTek, Inc.
CVE-2021-31573 · MediaTek, Inc. EN7528, EN7580
In Config Manager, there is a possible command injection due to improper input validation.
CVE-2021-31574 · MediaTek, Inc. EN7528, EN7580
In Config Manager, there is a possible command injection due to improper input validation.
CVE-2021-31575 · MediaTek, Inc. EN7528, EN7580
In Config Manager, there is a possible command injection due to improper input validation.
CVE-2021-31578 · MediaTek, Inc. EN7528, EN7580
In Boa, there is a possible escalation of privilege due to a stack buffer overflow.
CVE-2021-31577 · MediaTek, Inc. EN7528, EN7580
In Boa, there is a possible escalation of privilege due to a missing permission check.
Siemens
CVE-2023-25139 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP