Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rsistent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29731/CVE%20detail.md
CVE ID: CVE-2023-29732 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-09T21:31:02.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/bl
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29732/CVE%20detail.md
CVE ID: CVE-2023-29733 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T15:03:41.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These files hold data that affects many app functions. Malicious modifications by unauthorized apps can cause security issues, such as functionality manipulation, resulting in a severe escalation of privilege attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29733/CVE%20detail.md
CVE ID: CVE-2023-29734 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T15:01:30.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29734/CVE%20detail.md
CVE ID: CVE-2023-29735 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T14:59:25.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29735/CVE%20detail.md
CVE ID: CVE-2023-29736 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:47:41.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29736/CVE%20detail.md
CVE ID: CVE-2023-29737 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T14:56:04.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause a denial of service via the database files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.wavekeyboard.com/ - https://play.google.com/store/apps/details?id=com.wave.keyboard - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29737/CVE%20detail.md
CVE ID: CVE-2023-29738 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T17:04:08.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause code execution and escalation of Privileges via the database files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.wavekeyboard.com/ - https://play.google.com/store/apps/details?id=com.wave.keyboard - https://play.google.com/store/apps/details?id=com.amdroidalarmclock.amdroid - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29738/CVE%20detail.md
CVE ID: CVE-2023-29739 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T17:00:41.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://amdroidapp.com/ - https://play.google.com/store/apps/details?id=com.amdroidalarmclock.amdroid - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29739/CVE%20detail.md
CVE ID: CVE-2023-29740 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T16:59:40.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of service attack by manipulating the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://amdroidapp.com/ - https://play.google.com/store/apps/details?id=com.amdroidalarmclock.amdroid - https://play.google.com/store/apps/details?id=com.icoolme.android.weather - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29740/CVE%20detail.md
CVE ID: CVE-2023-29741 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T16:57:03.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zmtqsh.com/ - https://play.google.com/store/apps/details?id=com.icoolme.android.weather - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29741/CVE%20detail.md
CVE ID: CVE-2023-29742 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T16:55:56.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zmtqsh.com/ - https://play.google.com/store/apps/details?id=com.icoolme.android.weather - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29742/CVE%20detail.md
CVE ID: CVE-2023-29743 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:03:22.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zmtqsh.com/ - https://play.google.com/store/apps/details?id=com.icoolme.android.weather - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29743/CVE%20detail.md
CVE ID: CVE-2023-29745 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:01:44.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.zmtqsh.com/ - https://play.google.com/store/apps/details?id=com.icoolme.android.weather - https://play.google.com/store/apps/details?id=com.TheThaiger.android - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29745/CVE%20detail.md
CVE ID: CVE-2023-29746 State: PUBLISHED Published: 2023-06-02T00:00:00.000Z Last Updated: 2025-01-31T14:03:32.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.TheThaiger.android - https://thethaiger.com/ - https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29746/CVE%20detail.md
CVE ID: CVE-2023-29747 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-09T21:16:33.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://apk
isplay exceptions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk - https://www.instagram.com/nihans_macrame/ - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29747/CVE%20detail.md
CVE ID: CVE-2023-29748 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:58:30.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreference file. An attacker can leverage this method to inject a large amount of data into any SharedPreference file, which will be loaded into memory when the application is opened. When an attacker injects too much data, the application will trigger an OOM error and crash at startup, resulting in a persistent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
startup, resulting in a persistent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk - https://www.instagram.com/nihans_macrame/ - https://play.google.com/store/apps/details?id=ru.yandex.yandexnavi - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29748/CVE%20detail.md
CVE ID: CVE-2023-29749 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:00:09.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29749/CVE%20detailed.md
CVE ID: CVE-2023-29751 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T19:23:55.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29751/CVE%20detailed.md
CVE ID: CVE-2023-29752 State: PUBLISHED Published: 2023-06-09T00:00:00.000Z Last Updated: 2025-01-28T16:01:07.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29752/CVE%20detailed.md
CVE ID: CVE-2023-29753 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T19:08:44.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29753/CVE%20detailed.md
CVE ID: CVE-2023-29755 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T19:07:04.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29755/CVE%20detailed.md
CVE ID: CVE-2023-29756 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T19:05:17.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29756/CVE%20detailed.md
CVE ID: CVE-2023-29757 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T19:02:43.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29757/CVE%20detailed.md
CVE ID: CVE-2023-29758 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T19:01:10.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29758/CVE%20detailed.md
CVE ID: CVE-2023-29759 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:59:18.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the database files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29759/CVE%20detailed.md
CVE ID: CVE-2023-29761 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:23:10.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29761/CVE%20detailed.md
CVE ID: CVE-2023-29766 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:18:11.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the database files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29766/CVE%20detailed.md
CVE ID: CVE-2023-29767 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T17:45:19.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent denial of service via the database files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29767/CVE%20detailed.md
CVE ID: CVE-2023-29770 State: PUBLISHED Published: 2023-11-27T00:00:00 Last Updated: 2024-08-02T14:14:39.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sapplica/sentrifugo/issues/384 - https://github.com/sapplica/sentrifugo
CVE ID: CVE-2023-29772 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:41:35.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/donnm/cves/-/blob/master/xss_rtac51u_syslog.md
CVE ID: CVE-2023-29774 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-02-06T15:09:21.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iteachyou-wjn/dreamer_cms/issues/10
CVE ID: CVE-2023-29778 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:39:51.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://glinet.com - https://github.com/OlivierLaflamme/cve/blob/main/GL.iNET/MT3000/get_nginx_log_RCE.md
CVE ID: CVE-2023-29779 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T17:33:12.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery after receiving the 'Set_short_poll_interval' command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://us.sengled.com/ - https://github.com/iot-sec23/IoT-CVE/blob/main/Sengled%20D
ISA ADP Vulnrichment: References: - https://us.sengled.com/ - https://github.com/iot-sec23/IoT-CVE/blob/main/Sengled%20Dimmer%20Switch%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-29780 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:14:09.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3reality.com/ - https://github.com/iot-sec23/IoT-CVE/blob/main/Third%20Reality%20Smart%20Blind%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-29790 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:39:30.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.mo60.cn/index.php/archives/kodbox.html
CVE ID: CVE-2023-29791 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-28T20:40:06.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.mo60.cn/index.php/archives/kodbox-xss.html
CVE ID: CVE-2023-29798 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:10:28.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Injection-4-ea4969f635f54fe5b2f575e93443a4e0
CVE ID: CVE-2023-29799 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:09:03.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Inject-6-3ee0faa243134ae2bc20e6670d80bada
CVE ID: CVE-2023-29800 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:08:02.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Injection-5-e88b72309a3c4e20b7469b3679c0c7d9
CVE ID: CVE-2023-29801 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:06:53.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Injection-2-af41252fe96244209589d4e6da9aa7b7
CVE ID: CVE-2023-29802 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:05:25.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Injection-3-8eb94b608bcd48f8aa4e983d2d1c4526
CVE ID: CVE-2023-29803 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T20:51:20.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Inject-1-4a37b0679f69478285d1ba640e5f0897