Vulnerability index

Browse CVEs

1,082 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2023-30053 TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection. A7100ru Firmware No fix yet Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2023-30054 TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially construc… A7100ru Firmware No fix yet Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2023-30013EPSS 26% TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnera… X5000r Firmware No fix yet Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2023-29800 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29801 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parame… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29802 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function. X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29803 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function. X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29798 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg fu… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-29799 TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg funct… X18 Firmware No fix yet Fix from $2,3002023-04-14 CRITICAL 9.8 CVE-2023-26978 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIe… A7100ru Firmware No fix yet Fix from $2,3002023-04-07 CRITICAL 9.8 CVE-2023-26848 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRul… A7100ru Firmware No fix yet Fix from $2,3002023-04-07 CRITICAL 9.8 CVE-2023-27232 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting/setWanIe… A7100ru Firmware No fix yet Fix from $2,3002023-03-28 CRITICAL 9.8 CVE-2023-27229 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-03-28 CRITICAL 9.8 CVE-2023-27231 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-03-28 CRITICAL 9.8 CVE-2022-28495 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWl… Cp900 Firmware No fix yet Fix from $2,3002023-03-24 CRITICAL 9.8 CVE-2022-28496 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminus… Cp900 Firmware Mitigation only Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28497 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via th… Cp900 Firmware Mitigation only Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2023-27135 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/setWanIeCfg. A7100ru Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28491 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter… Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28493 A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service, Cp900 Firmware Mitigation only Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28492 TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login. Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-28494 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filena… Cp900 Firmware No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2023-25395 TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticD… A7100ru Firmware No fix yet Fix from $2,3002023-03-08 CRITICAL 9.8 CVE-2023-24184 TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability. A7100ru Firmware Mitigation only Fix from $2,3002023-02-21 CRITICAL 9.8 CVE-2023-23064 TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control. A720r Firmware No fix yet Fix from $2,3002023-02-17 CRITICAL 9.8 CVE-2023-24238 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRu… A7100ru Firmware No fix yet Fix from $2,3002023-02-16 CRITICAL 9.8 CVE-2023-24236 TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDh… A7100ru Firmware No fix yet Fix from $2,3002023-02-16 CRITICAL 9.8 CVE-2023-24159 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-14 CRITICAL 9.8 CVE-2023-24160 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-14 CRITICAL 9.8 CVE-2023-24161 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function. Ca300 Poe Firmware No fix yet Fix from $2,3002023-02-14