Browse CVEs

CRITICAL 9.8 CVE-2021-31575 In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a p… En7580 Firmware Mitigation only Fix from $2,3002023-02-06 CRITICAL 9.8 CVE-2023-23333EPSS 99% There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions throu… Solarview Compact Firmware after 6.00 Fix from $2,3002023-02-06 CRITICAL 9.8 CVE-2023-24276 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhc… A7100ru Firmware No fix yet Fix from $2,3002023-02-06 HIGH 7.8 CVE-2022-25855 All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization. Create Choo App3 No fix yet Fix from $1,9502023-02-06 CRITICAL 9.8 CVE-2023-24157 A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitr… T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24151 A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute a… T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24152 A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbit… T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24153 A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to exec… T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24154 TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW. T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24156 A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrar… T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24148 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24150 A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitra… T8 Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24142 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag func… Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24143 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag fu… Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24144 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24145 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData fu… Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24146 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24138 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24139 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24140 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag funct… Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 CRITICAL 9.8 CVE-2023-24141 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag f… Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-03 HIGH 7.5 CVE-2023-0648 A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsole. The ma… Dst Admin No fix yet Fix from $1,9502023-02-02 HIGH 7.5 CVE-2023-0649 A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast… Dst Admin No fix yet Fix from $1,9502023-02-02 HIGH 7.5 CVE-2023-0647 A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality of the fil… Dst Admin No fix yet Fix from $1,9502023-02-02 HIGH 7.5 CVE-2023-0646 A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cav… Dst Admin No fix yet Fix from $1,9502023-02-02 CRITICAL 9.8 CVE-2023-0638 A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component W… Tew 811dru Firmware Mitigation only Fix from $2,3002023-02-02 CRITICAL 9.8 CVE-2023-0640EPSS 7% A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of… Tew 652brp Firmware No fix yet Fix from $2,3002023-02-02 HIGH 7.8 CVE-2023-22657 On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may all… F5os A 1.3.0 / 1.5.0+ Fix from $1,9502023-02-01 HIGH 8.8 CVE-2023-0611 A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the f… Tew 652brp Firmware No fix yet Fix from $1,9502023-02-01 HIGH 7.8 CVE-2022-25916 Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitization in the 'wiscan.scan' functi… Mt7688 Wiscan 0.8.3+ Fix from $1,9502023-02-01