Vulnerability index

Browse CVEs

1,039 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2023-31569 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function. X5000r Firmware Mitigation only Fix from $2,3002023-06-06 CRITICAL 9.8 CVE-2023-33486 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allow… X5000r Firmware No fix yet Fix from $2,3002023-05-31 CRITICAL 9.8 CVE-2023-33487 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability al… X5000r Firmware No fix yet Fix from $2,3002023-05-31 HIGH 8.8 CVE-2023-33485 TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the add… X5000r Firmware No fix yet Fix from $1,9502023-05-31 MEDIUM 5.5 CVE-2023-2790 A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squas… N200re Firmware No fix yet Fix from $1,6002023-05-18 CRITICAL 9.8 CVE-2023-31729 TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi. A3300r Firmware Mitigation only Fix from $2,3002023-05-18 CRITICAL 9.8 CVE-2023-31856 A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers … Cp300\+ Firmware No fix yet Fix from $2,3002023-05-16 CRITICAL 9.8 CVE-2023-30053 TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection. A7100ru Firmware No fix yet Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2023-30054 TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially construc… A7100ru Firmware No fix yet Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2023-30013EPSS 26% TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnera… X5000r Firmware No fix yet Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2023-29800 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29801 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parame… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29802 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function. X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29803 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function. X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29798 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg fu… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29799 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg funct… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-26978 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIe… A7100ru Firmware No fix yet Fix from $2,3002023-04-07 CRITICAL 9.8 CVE-2023-26848 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRul… A7100ru Firmware No fix yet Fix from $2,3002023-04-07 CRITICAL 9.8 CVE-2023-27232 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIe… A7100ru Firmware No fix yet Fix from $2,3002023-03-28 CRITICAL 9.8 CVE-2023-27229 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-03-28 CRITICAL 9.8 CVE-2023-27231 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-03-28 CRITICAL 9.8 CVE-2022-28495 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWl… Cp900 Firmware No fix yet Fix from $2,3002023-03-24 CRITICAL 9.8 CVE-2022-28496 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminus… Cp900 Firmware Mitigation only Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28497 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via th… Cp900 Firmware Mitigation only Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2023-27135 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28491 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter… Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28493 A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service, Cp900 Firmware Mitigation only Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28492 TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login. Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28494 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filena… Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2023-25395 TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticD… A7100ru Firmware No fix yet Fix from $2,3002023-03-08