VYPR

CVEs

38,098 total · page 340 of 762

AllCriticalHighKEV
  • CVE-2024-22199CriJan 11, 2024
    Gofiber
    Django
    risk 0.53cvss 9.3epss 0.00

    This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the…

  • CVE-2024-23061CriJan 11, 2024
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function.

  • CVE-2024-23060CriJan 11, 2024
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg function.

  • CVE-2024-23059CriJan 11, 2024
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the setDdnsCfg function.

  • CVE-2024-23058CriJan 11, 2024
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr069Cfg function.

  • CVE-2024-23057CriJan 11, 2024
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function.

  • CVE-2024-22942CriJan 11, 2024
    Totolink
    A3300R
    risk 0.64cvss 9.8epss 0.02

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the setWanCfg function.

  • CVE-2023-51987CriJan 11, 2024
    Dlink
    DIR-822
    risk 0.64cvss 9.8epss 0.01

    D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords.

  • CVE-2023-51984CriJan 11, 2024
    Dlink
    DIR-822
    risk 0.64cvss 9.8epss 0.02

    D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell.

  • CVE-2023-6875CriJan 11, 2024
    WordPress
    POST SMTP Mailer
    risk 0.67cvss 9.8epss 0.90

    The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all versions up to, and…

  • CVE-2023-6567CriJan 11, 2024
    WordPress
    Learnpress
    risk 0.61cvss 9.8epss 0.51

    The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …

  • CVE-2023-6316CriJan 11, 2024
    WordPress
    Mw Wp Form
    risk 0.57cvss 9.8epss 0.01

    The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in versions up to, and including, 5.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on…

  • CVE-2023-52032CriJan 11, 2024
    Totolink
    EX1200T
    risk 0.64cvss 9.8epss 0.02

    TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.

  • CVE-2023-52031CriJan 11, 2024
    Totolink
    A3700R
    risk 0.64cvss 9.8epss 0.02

    TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFile function.

  • CVE-2023-52030CriJan 11, 2024
    Totolink
    A3700R
    risk 0.64cvss 9.8epss 0.02

    TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function.

  • CVE-2023-52029CriJan 11, 2024
    Totolink
    A3700R
    risk 0.64cvss 9.8epss 0.02

    TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg function.

  • CVE-2023-52028CriJan 11, 2024
    Totolink
    A3700R
    risk 0.64cvss 9.8epss 0.02

    TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg function.

  • CVE-2023-52027CriJan 11, 2024
    Totolink
    A3700R
    risk 0.64cvss 9.8epss 0.02

    TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the NTPSyncWithHost function.

  • CVE-2023-6699CriJan 11, 2024
    Wpcompress
    Wp Compress
    risk 0.59cvss 9.1epss 0.01

    The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.10.33 via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the…

  • CVE-2024-21669CriJan 11, 2024
    Hyperledger
    Aries Cloud Agent
    risk 0.57cvss 9.9epss 0.01

    Hyperledger Aries Cloud Agent Python (ACA-Py) is a foundation for building decentralized identity applications and services running in non-mobile environments. When verifying W3C Format Verifiable Credentials using JSON-LD with Linked Data Proofs (LDP-VCs), the result of…

  • CVE-2024-21638CriJan 10, 2024
    Azure
    IPAM
    risk 0.00cvss 9.1epss 0.02

    Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively. By design there is no write access to customers' Azure environments as the Service Principal…

  • CVE-2023-51123CriJan 10, 2024
    Dlink
    dir815
    risk 0.66cvss 9.8epss 0.24

    An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.

  • CVE-2023-40414CriJan 10, 2024
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.01

    A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPadOS 17, tvOS 17, macOS Sonoma 14, Safari 17. Processing web content may lead to arbitrary code execution.

  • CVE-2023-52064CriJan 10, 2024
    WuzhiCMS
    Wuzhicms
    risk 0.64cvss 9.8epss 0.01

    Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php.

  • CVE-2023-51126CriJan 10, 2024
    Flir
    Ax8
    risk 0.66cvss 9.8epss 0.31

    Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. NOTE: The vendor has stated that with the introduction of firmware version 1.49.16 (Jan 2023) the FLIR AX8 should no longer be…

  • CVE-2023-31488CriJan 10, 2024
    Hyland
    Perceptive Filters
    risk 0.64cvss 9.8epss 0.01

    Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a…

  • CVE-2023-51970CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

  • CVE-2023-51969CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo.

  • CVE-2023-51968CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.

  • CVE-2023-51967CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.

  • CVE-2023-51962CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.

  • CVE-2023-49599CriJan 10, 2024
    WWBN
    Avideo
    risk 0.57cvss 9.8epss 0.01

    An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead to privilege escalation. An attacker can gather system information via HTTP requests and brute…

  • CVE-2023-48728CriJan 10, 2024
    WWBN
    Avideo
    risk 0.63cvss 9.6epss 0.02

    A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to…

  • CVE-2023-47862CriJan 10, 2024
    WWBN
    Avideo
    risk 0.64cvss 9.8epss 0.01

    A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send a series of HTTP requests to trigger this…

  • CVE-2023-47861CriJan 10, 2024
    WWBN
    Avideo
    risk 0.59cvss 9.0epss 0.01

    A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to…

  • CVE-2023-51965CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.

  • CVE-2023-51964CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.

  • CVE-2023-51963CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.

  • CVE-2023-51960CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.

  • CVE-2023-51959CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.

  • CVE-2023-51958CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.

  • CVE-2023-51957CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.

  • CVE-2023-51956CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv

  • CVE-2023-51955CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.00

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.

  • CVE-2023-51954CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.

  • CVE-2023-51953CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.

  • CVE-2023-51952CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.

  • CVE-2023-51966CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.

  • CVE-2023-51961CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.01

    Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.

  • CVE-2023-51972CriJan 10, 2024
    Tenda
    AX1803
    risk 0.64cvss 9.8epss 0.02

    Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.