dbcve.org
Vulnerability index

Browse CVEs

1,082 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
A7100ru Firmware CRITICAL 9.8
CVE-2023-30053

TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.

No fix yet
Fix from $2,300 2023-05-05
A7100ru Firmware CRITICAL 9.8
CVE-2023-30054

TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially construc…

No fix yet
Fix from $2,300 2023-05-05
X5000r Firmware CRITICAL 9.8
CVE-2023-30013EPSS 26%

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnera…

No fix yet
Fix from $2,300 2023-05-05
X18 Firmware CRITICAL 9.8
CVE-2023-29800

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile…

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29801

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parame…

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function.

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29803

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function.

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29798

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg fu…

No fix yet
Fix from $2,300 2023-04-14
X18 Firmware CRITICAL 9.8
CVE-2023-29799

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg funct…

No fix yet
Fix from $2,300 2023-04-14
A7100ru Firmware CRITICAL 9.8
CVE-2023-26978

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIe…

No fix yet
Fix from $2,300 2023-04-07
A7100ru Firmware CRITICAL 9.8
CVE-2023-26848

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRul…

No fix yet
Fix from $2,300 2023-04-07
A7100ru Firmware CRITICAL 9.8
CVE-2023-27232

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIe…

No fix yet
Fix from $2,300 2023-03-28
A7100ru Firmware CRITICAL 9.8
CVE-2023-27229

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg.

No fix yet
Fix from $2,300 2023-03-28
A7100ru Firmware CRITICAL 9.8
CVE-2023-27231

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg.

No fix yet
Fix from $2,300 2023-03-28
Cp900 Firmware CRITICAL 9.8
CVE-2022-28495

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWl…

No fix yet
Fix from $2,300 2023-03-24
Cp900 Firmware CRITICAL 9.8
CVE-2022-28496

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminus…

Mitigation only
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28497

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via th…

Mitigation only
Fix from $2,300 2023-03-23
A7100ru Firmware CRITICAL 9.8
CVE-2023-27135

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg.

No fix yet
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28491

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter…

No fix yet
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28493

A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,

Mitigation only
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28492

TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.

No fix yet
Fix from $2,300 2023-03-23
Cp900 Firmware CRITICAL 9.8
CVE-2022-28494

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filena…

No fix yet
Fix from $2,300 2023-03-23
A7100ru Firmware CRITICAL 9.8
CVE-2023-25395

TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticD…

No fix yet
Fix from $2,300 2023-03-08
A7100ru Firmware CRITICAL 9.8
CVE-2023-24184

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.

Mitigation only
Fix from $2,300 2023-02-21
A720r Firmware CRITICAL 9.8
CVE-2023-23064

TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

No fix yet
Fix from $2,300 2023-02-17
A7100ru Firmware CRITICAL 9.8
CVE-2023-24238

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRu…

No fix yet
Fix from $2,300 2023-02-16
A7100ru Firmware CRITICAL 9.8
CVE-2023-24236

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDh…

No fix yet
Fix from $2,300 2023-02-16
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24159

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function.

No fix yet
Fix from $2,300 2023-02-14
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24160

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.

No fix yet
Fix from $2,300 2023-02-14
Ca300 Poe Firmware CRITICAL 9.8
CVE-2023-24161

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.

No fix yet
Fix from $2,300 2023-02-14