Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-35474 State: PUBLISHED Published: 2022-08-16T20:02:04 Last Updated: 2024-08-03T09:36:44.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35475 State: PUBLISHED Published: 2022-08-16T20:12:57 Last Updated: 2024-08-03T09:36:44.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35476 State: PUBLISHED Published: 2022-08-16T20:02:05 Last Updated: 2024-08-03T09:36:44.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35477 State: PUBLISHED Published: 2022-08-16T20:13:01 Last Updated: 2024-08-03T09:36:44.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35478 State: PUBLISHED Published: 2022-08-16T20:02:06 Last Updated: 2024-08-03T09:36:44.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35479 State: PUBLISHED Published: 2022-08-16T20:13:01 Last Updated: 2024-08-03T09:36:44.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35481 State: PUBLISHED Published: 2022-08-16T20:13:12 Last Updated: 2024-08-03T09:36:44.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35482 State: PUBLISHED Published: 2022-08-16T20:13:13 Last Updated: 2024-08-03T09:36:43.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35483 State: PUBLISHED Published: 2022-08-16T20:13:14 Last Updated: 2024-08-03T09:36:44.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35484 State: PUBLISHED Published: 2022-08-16T20:13:15 Last Updated: 2024-08-03T09:36:44.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35485 State: PUBLISHED Published: 2022-08-16T20:13:15 Last Updated: 2024-08-03T09:36:44.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35486 State: PUBLISHED Published: 2022-08-16T20:13:24 Last Updated: 2024-08-03T09:36:44.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae. Additional Analyst Notes: - CVE Program Container: References: - https://cvjark.github.io/2022/07/06/CVE-2022-33047/
CVE ID: CVE-2022-35487 State: PUBLISHED Published: 2022-08-08T13:51:36 Last Updated: 2024-08-03T09:36:44.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an unauthenticated attacker to gain access to attachments, such as emails or attached files. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/de/advisories/zaa-2022-08
CVE ID: CVE-2022-35488 State: PUBLISHED Published: 2022-08-08T13:53:34 Last Updated: 2024-08-03T09:36:44.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account to cause Denial Of Service by many generated emails which would also spam the victim. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/de/advisories/zaa-2022-05
CVE ID: CVE-2022-35489 State: PUBLISHED Published: 2022-08-08T13:55:30 Last Updated: 2024-08-03T09:36:44.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/de/advisories/zaa-2022-06
CVE ID: CVE-2022-35490 State: PUBLISHED Published: 2022-08-08T13:58:33 Last Updated: 2024-08-03T09:36:44.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable amount of attempts, users are invalidated and logins prevented. An attacker might work around this prevention, enabling them to send more than the configured amount of requests before the user invalidation takes place. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/de/advisories/zaa-2022-07
CVE ID: CVE-2022-35491 State: PUBLISHED Published: 2022-08-09T16:25:06 Last Updated: 2024-08-03T09:36:44.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1337536723/iot/blob/main/totolink/A3002RU.md
CVE ID: CVE-2022-35493 State: PUBLISHED Published: 2022-08-08T14:10:51 Last Updated: 2024-08-03T09:36:44.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_products?search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Keyvanhardani/Exploit-eShop-Multipurpose-Ecommerce-Store-Website-3.0.4-Cross-Site-Scripting-XSS/blob/main/README.md
CVE ID: CVE-2022-35500 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T19:59:04.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://amasty.com - https://github.com/afine-com/CVE-2022-35500
CVE ID: CVE-2022-35501 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T19:57:01.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://amasty.com - https://github.com/afine-com/CVE-2022-35501
CVE ID: CVE-2022-35503 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-03T09:36:44.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor. An attacker may be able execute code to change the normal execution of the OSM components, retrieve confidential information, or gain access other parts of a Telco Operator infrastructure other than OSM itself. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://osm.etsi.org/news
elf. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://osm.etsi.org/news-events/blog/83-cve-2022-35503-disclosure - https://osm.etsi.org/
CVE ID: CVE-2022-35505 State: PUBLISHED Published: 2022-08-03T20:33:43 Last Updated: 2024-08-03T09:36:44.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h3xduck/TripleCross/issues/40
CVE ID: CVE-2022-35506 State: PUBLISHED Published: 2022-08-03T20:33:44 Last Updated: 2024-08-03T09:36:44.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: TripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no limit to the length of program parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h3xduck/TripleCross/issues/40
CVE ID: CVE-2022-35507 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T15:23:02.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, causing a client-side DoS. This affects Chromium-based browsers because they allow injection of response headers with %0d. This is fixed in pve-http-server 4.1-3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.proxmox.com/?p=pve-http-
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.proxmox.com/?p=pve-http-server.git%3Ba=commitdiff%3Bh=936007ae0241811093155000486da171379c23c2 - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/
CVE ID: CVE-2022-35508 State: PUBLISHED Published: 2022-12-04T00:00:00.000Z Last Updated: 2025-04-24T15:21:59.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox Mail Gateway, privilege escalation to the root@pam account is possible if the backup feature has ever been used, because backup files such as pmg-backup_YYYY_MM_DD_*.tgz have 0644 permissions and contain an authkey value
r been used, because backup files such as pmg-backup_YYYY_MM_DD_*.tgz have 0644 permissions and contain an authkey value. This is fixed in pve-http-server 4.1-3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.proxmox.com/?p=pve-http-server.git%3Ba=commitdiff%3Bh=580d540ea907ba15f64379c5bb69ecf1a49a875f - https://git.proxmox.com/?p=pve-http-server.git%3Ba=commitdiff%3Bh=e9df8a6e76b2a18f89295a5d92a62177bbf0f762 - https://git.proxmox.com/?p=pve-http-server.git%3Ba=commitdiff%3Bh=c2bd69c7b5e9c775f96021cf8ae53da3dbd9029d - https://starlabs.sg/blog/2022/12-multiple-vulnerabilites-in-proxmox-ve--proxmox-mail-gateway/
CVE ID: CVE-2022-35509 State: PUBLISHED Published: 2022-08-09T18:14:57 Last Updated: 2024-08-03T09:36:44.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eyoucms/eyoucms/issues/25
CVE ID: CVE-2022-35513 State: PUBLISHED Published: 2022-09-07T13:54:18 Last Updated: 2024-08-03T09:36:44.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/todbot/Blink1Control2/releases - https://github.com/p1ckzi/CVE-2022-35513 - http://packetstormsecurity.com/files/168428/Blink1Control2-2.2.7-Weak-Password-Encryption.html
CVE ID: CVE-2022-35516 State: PUBLISHED Published: 2022-08-17T19:09:53 Last Updated: 2024-08-03T09:36:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whitehatl/Vulnerability/blob/main/web/dedecms/5.7.93/Login.poc.md
CVE ID: CVE-2022-35517 State: PUBLISHED Published: 2022-08-09T19:59:29 Last Updated: 2024-08-03T09:36:44.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType, rwan_ip, rwan_mask, rwan_gateway, ppp_username, ppp_passwd and ppp_setver, which leads to command injection in page /wizard_router_mesh.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_router_meshshtml-command-injection-in-admcgi
CVE ID: CVE-2022-35518 State: PUBLISHED Published: 2022-08-09T19:56:01.000Z Last Updated: 2025-10-20T17:47:45.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command injection in page /nas_disk.shtml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-nas_diskshtml-command-injection-in-nascgi
CVE ID: CVE-2022-35519 State: PUBLISHED Published: 2022-08-09T19:55:21 Last Updated: 2024-08-03T09:36:44.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in page /cli_black_list.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-deleting-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi
CVE ID: CVE-2022-35520 State: PUBLISHED Published: 2022-08-09T19:53:56 Last Updated: 2024-08-03T09:36:44.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which doesn't appear in POST body, but exist in cgi binary. This leads to command injection in page /ledonoff.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-ledonoffshtml-hidden-parameter-ufconf-command-injection-in-apicgi
CVE ID: CVE-2022-35521 State: PUBLISHED Published: 2022-08-09T19:52:56 Last Updated: 2024-08-03T09:36:44.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnabled, pingFrmWANFilterEnabled and blockSynFloodEnabled, which leads to command injection in page /man_security.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-man_securityshtml-command-injection-in-firewallcgi
CVE ID: CVE-2022-35522 State: PUBLISHED Published: 2022-08-09T19:51:50 Last Updated: 2024-08-03T09:36:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_mask and rwan_ip, which leads to command injection in page /wan.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wanshtml-command-injection-in-admcgi
CVE ID: CVE-2022-35523 State: PUBLISHED Published: 2022-08-09T19:50:17 Last Updated: 2024-08-03T09:36:44.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to command injection in page /cli_black_list.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#command-injection-occurs-when-adding-blacklist-in-wavlink-router-ac1200-page-cli_black_listshtml-in-firewallcgi
CVE ID: CVE-2022-35524 State: PUBLISHED Published: 2022-08-09T19:49:18 Last Updated: 2024-08-03T09:36:44.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_Automode, wlan_bssid, wlan_ssid and wlan_channel, which leads to command injection in page /wizard_rep.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-wizard_repshtml-command-injection-in-admcgi
CVE ID: CVE-2022-35525 State: PUBLISHED Published: 2022-08-09T19:47:38 Last Updated: 2024-08-03T09:36:44.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in page /ledonoff.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-ledonoffshtml-command-injection-in-admcgi
CVE ID: CVE-2022-35526 State: PUBLISHED Published: 2022-08-09T19:43:41 Last Updated: 2024-08-03T09:36:44.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/blob/main/wavlink/README.md#wavlink-router-ac1200-page-loginshtml-command-injection-in-logincgi
CVE ID: CVE-2022-35533 State: PUBLISHED Published: 2022-08-09T19:37:25 Last Updated: 2024-08-03T09:36:44.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command injection in page /qos.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-qosshtml-hidden-parameters-command-injection-in-qoscgi
CVE ID: CVE-2022-35534 State: PUBLISHED Published: 2022-08-09T19:34:33 Last Updated: 2024-08-03T09:36:44.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to command injection in page /wifi_multi_ssid.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-wifi_multi_ssidshtml-command-injection-in-wirelesscgi
CVE ID: CVE-2022-35535 State: PUBLISHED Published: 2022-08-09T19:32:10 Last Updated: 2024-08-03T09:36:44.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in page /wifi_mesh.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-adding-extender-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi
CVE ID: CVE-2022-35536 State: PUBLISHED Published: 2022-08-09T19:28:33 Last Updated: 2024-08-03T09:36:44.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to command injection in page /qos.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-qosshtml-command-injection-in-qoscgi
CVE ID: CVE-2022-35537 State: PUBLISHED Published: 2022-08-09T19:07:33 Last Updated: 2024-08-03T09:36:44.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command injection in page /wifi_mesh.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#wavlink-router-ac1200-page-wifi_meshshtml-hidden-parameter-command-injection-in-wirelesscgi
CVE ID: CVE-2022-35538 State: PUBLISHED Published: 2022-08-09T19:03:36 Last Updated: 2024-08-03T09:36:44.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list and b_delete_al_mac, which leads to command injection in page /wifi_mesh.shtml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TyeYeah/othercveinfo/tree/main/wavlink#command-injection-occurs-when-clicking-the-button-in-wavlink-router-ac1200-page-wifi_meshshtml-in-wirelesscgi
CVE ID: CVE-2022-35540 State: PUBLISHED Published: 2022-08-18T22:17:40 Last Updated: 2024-08-03T09:36:44.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotnetcore/AgileConfig/issues/91