Vulnerability index

Browse CVEs

3,669 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Command InjectionCWE-77 × clear
En7580 Firmware CRITICAL 9.8
CVE-2021-31575

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a p…

Mitigation only
Fix from $2,300 2023-02-06
Solarview Compact Firmware CRITICAL 9.8
CVE-2023-23333EPSS 99%

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions throu…

Fix: after 6.00
Fix from $2,300 2023-02-06
A7100ru Firmware CRITICAL 9.8
CVE-2023-24276

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhc…

No fix yet
Fix from $2,300 2023-02-06
Create Choo App3 HIGH 7.8
CVE-2022-25855

All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.

No fix yet
Fix from $1,950 2023-02-06
T8 Firmware CRITICAL 9.8
CVE-2023-24157

A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitr…

No fix yet
Fix from $2,300 2023-02-03
T8 Firmware CRITICAL 9.8
CVE-2023-24151

A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute a…

No fix yet
Fix from $2,300 2023-02-03
T8 Firmware CRITICAL 9.8
CVE-2023-24152

A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbit…

No fix yet
Fix from $2,300 2023-02-03
T8 Firmware CRITICAL 9.8
CVE-2023-24153

A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to exec…

No fix yet
Fix from $2,300 2023-02-03
T8 Firmware CRITICAL 9.8
CVE-2023-24154

TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.

No fix yet
Fix from $2,300 2023-02-03
T8 Firmware CRITICAL 9.8
CVE-2023-24156

A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrar…

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24148

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function.

No fix yet
Fix from $2,300 2023-02-03
T8 Firmware CRITICAL 9.8
CVE-2023-24150

A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitra…

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24142

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag func…

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24143

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag fu…

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24144

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function.

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24145

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData fu…

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24146

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function.

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24138

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function.

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24139

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function.

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag funct…

No fix yet
Fix from $2,300 2023-02-03
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24141

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag f…

No fix yet
Fix from $2,300 2023-02-03
Dst Admin HIGH 7.5
CVE-2023-0648

A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsole. The ma…

No fix yet
Fix from $1,950 2023-02-02
Dst Admin HIGH 7.5
CVE-2023-0649

A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast…

No fix yet
Fix from $1,950 2023-02-02
Dst Admin HIGH 7.5
CVE-2023-0647

A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality of the fil…

No fix yet
Fix from $1,950 2023-02-02
Dst Admin HIGH 7.5
CVE-2023-0646

A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cav…

No fix yet
Fix from $1,950 2023-02-02
Tew 811dru Firmware CRITICAL 9.8
CVE-2023-0638

A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component W…

Mitigation only
Fix from $2,300 2023-02-02
Tew 652brp Firmware CRITICAL 9.8
CVE-2023-0640EPSS 7%

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of…

No fix yet
Fix from $2,300 2023-02-02
F5os A HIGH 7.8
CVE-2023-22657

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may all…

Fix: 1.3.0 / 1.5.0+
Fix from $1,950 2023-02-01
Tew 652brp Firmware HIGH 8.8
CVE-2023-0611

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the f…

No fix yet
Fix from $1,950 2023-02-01
Mt7688 Wiscan HIGH 7.8
CVE-2022-25916

Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitization in the 'wiscan.scan' functi…

Fix: 0.8.3+
Fix from $1,950 2023-02-01