3 February 2023

35 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-24150

  A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allow…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24145

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version paramet…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24149

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24151

  A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24156

  A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24140

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum paramet…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24154

  TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the f…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24155

  TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the compo…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24142

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parame…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24146

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in th…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24153

  A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24157

  A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allo…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24141

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut par…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24152

  A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu all…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24138

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24148

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in …

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24139

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter …

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24144

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the …

  Feb 3, 2023
• Critical 9.8
  CVE-2023-24143

  TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop para…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-23086

  Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString functi…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-23087

  An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.

  Feb 3, 2023
• Critical 9.8
  CVE-2023-23088

  Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute …

  workflow Ubuntu
  Feb 3, 2023
• Critical 9.8
  CVE-2023-25135 Scanner template EPSS 25%

  vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP reque…

  Feb 3, 2023
• Critical 9.8
  CVE-2023-25139

  sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct…

  glibc mpfr4 Alpine Wolfi
  Feb 3, 2023
• Critical 9.1
  CVE-2022-31733

  Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are ac…

  Feb 3, 2023
• Critical 9.8
  CVE-2022-48021

  A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted messag…

  Feb 3, 2023
• Critical 9.8
  CVE-2021-36484

  SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article pa…

  Feb 3, 2023
• Critical 9.8
  CVE-2021-36424

  An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installati…

  Feb 3, 2023
• Critical 9.1
  CVE-2021-36431

  SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie inform…

  Feb 3, 2023
• Critical 9.8
  CVE-2021-36503

  SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat par…

  Feb 3, 2023
• Critical 9.1
  CVE-2021-36434

  SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie inform…

  Feb 3, 2023
• Critical 9.1
  CVE-2021-36433

  SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie inform…

  Feb 3, 2023
• Critical 9.1
  CVE-2021-37315

  Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.4163…

  Feb 3, 2023
• Critical 9.8
  CVE-2021-37497

  SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafte…

  Feb 3, 2023
• Critical 9.1
  CVE-2021-37317

  Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allow…

  Feb 3, 2023