Browse CVEs

CRITICAL 9.8 CVE-2024-21878 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) all… Iq Gateway Firmware 8.2.4225+ Fix from $2,3002024-08-12 HIGH 8.8 CVE-2024-21879 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url parameter of an authenticated enpoin… Iq Gateway Firmware 8.2.4225+ Fix from $1,9502024-08-12 HIGH 7.2 CVE-2024-21880 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint i… Iq Gateway Firmware after 7.3.120 Fix from $1,9502024-08-12 HIGH 7.2 CVE-2024-3659 Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one… Ar2140 Firmware 4.2.16+ Fix from $1,9502024-08-08 HIGH 7.2 CVE-2024-28739EPSS 19% An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter. Koha after 23.05.00 Fix from $1,9502024-08-06 CRITICAL 9.8 CVE-2024-39226EPSS 21% GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4… Mt6000 Firmware No fix yet Fix from $2,3002024-08-06 CRITICAL 9.3 CVE-2024-7397 Improper filering of special characters result in a command ('command injection') vulnerability in Korenix JetPort 5601v3.This issue affects JetPort … Mitigation only Fix from $2,3002024-08-05 CRITICAL 9.8 CVE-2024-7464EPSS 20% A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566. This issue affects the function setTelnetCfg of the com… Cp900 Firmware No fix yet Fix from $2,3002024-08-05 CRITICAL 9.8 CVE-2024-7443 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Vivotek IB8367A VVTK-0100b. Affected is the function getenv … Ib8367a Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-7442 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been rated as critical. This issue affects the functio… Sd9364 Firmware Mitigation only Fix from $2,3002024-08-03 CRITICAL 9.8 CVE-2024-7440 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d. It has been classified as critical. This affects the function… Cc8160 Firmware Mitigation only Fix from $2,3002024-08-03 HIGH 8.8 CVE-2024-7436EPSS 8% A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file m… Di 8100 Firmware No fix yet Fix from $1,9502024-08-03 HIGH 8.6 CVE-2024-42348 FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.2 can leak AD username and password when registering a comput… Fogproject 1.5.10.41.3+ Fix from $1,9502024-08-02 CRITICAL 9.8 CVE-2024-7029EPSS 39% Commands can be injected over the network and executed without authentication. Avm1203 Firmware No fix yet Fix from $2,3002024-08-02 HIGH 7.2 CVE-2022-4002 A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request. Q14 Firmware 1.5.0.16+ Fix from $1,9502024-07-31 HIGH 8.8 CVE-2024-7215 A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832 and classified as critical. Affected by this issue is the function NTPSyncWithHost of the f… Lr1200 Firmware No fix yet Fix from $1,9502024-07-30 HIGH 8.8 CVE-2024-7214 A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical. Affected by this vulnerability is the function set… Lr350 Firmware No fix yet Fix from $1,9502024-07-30 HIGH 7.8 CVE-2023-40396 The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may … Ipados 10.0 / 14.0+ Fix from $1,9502024-07-29 HIGH 8.3 CVE-2024-41637 RaspAP before 3.1.5 allows an attacker to escalate privileges: the www-data user has write access to the restapi.service file and also possesses Sudo… Mitigation only Fix from $1,9502024-07-29 HIGH 8.8 CVE-2024-7181 A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This vulnerability affects the function setTelnetCfg of t… A3600r Firmware No fix yet Fix from $1,9502024-07-29 HIGH 8.8 CVE-2024-7177 A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been classified as critical. Affected is the function setLanguageCfg of t… A3600r Firmware No fix yet Fix from $1,9502024-07-29 HIGH 8.8 CVE-2024-7174 A vulnerability, which was classified as critical, was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. This affects the function setdeviceName of th… A3600r Firmware No fix yet Fix from $1,9502024-07-29 HIGH 8.8 CVE-2024-7160 A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWanCfg of the file /cgi-b… A3700r Firmware No fix yet Fix from $1,9502024-07-28 HIGH 8.8 CVE-2024-7158 A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. It has been declared as critical. This vulnerability affects the function setTel… A3100r Firmware No fix yet Fix from $1,9502024-07-28 HIGH 7.0 CVE-2024-41815 Starship is a cross-shell prompt. Starting in version 1.0.0 and prior to version 1.20.0, undocumented and unpredictable shell expansion and/or quotin… Starship 1.20.0+ Fix from $1,9502024-07-26 HIGH 7.2 CVE-2024-38288 A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers wit… Turbomeeting 8.0+ Fix from $1,9502024-07-25 HIGH 8.8 CVE-2024-41136 An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful ex… Edgeconnect Sd Wan Orchestrator after 9.2.9 Fix from $1,9502024-07-24 HIGH 7.2 CVE-2024-41133 A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run … Mitigation only Fix from $1,9502024-07-24 HIGH 7.2 CVE-2024-41134 A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run … Mitigation only Fix from $1,9502024-07-24 HIGH 7.2 CVE-2024-41135 A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateway's Command Line Interface that allows remote authenticated users to run … Mitigation only Fix from $1,9502024-07-24