Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-35341 State: PUBLISHED Published: 2024-05-28T16:57:11.701Z Last Updated: 2025-02-13T15:54:10.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET request to /ConfigFile.ini or /config.xml URIs. This configuration file contains usernames and encrypted passwords (encrypted with a hardcoded key common to all devices). This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly mo
PC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE ID: CVE-2024-35342 State: PUBLISHED Published: 2024-05-28T16:52:06.723Z Last Updated: 2025-02-13T15:54:11.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volume, speaker volume, LED lighting, NTP, motion detection, etc. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
possibly more vendors/models of IP camera. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE ID: CVE-2024-35343 State: PUBLISHED Published: 2024-05-28T16:46:52.274Z Last Updated: 2025-02-13T15:54:11.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 (IP Cameras) firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
vendors/models of IP camera. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE ID: CVE-2024-35344 State: PUBLISHED Published: 2024-05-28T17:01:18.511Z Last Updated: 2025-02-13T15:54:12.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://willgu.es/pages/anpviz-ip-camera-vuln.html
CVE ID: CVE-2024-35345 State: PUBLISHED Published: 2024-05-30T16:00:05.136Z Last Updated: 2025-02-13T15:54:12.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298533/vuln1-cross-site-scripting-xss
CVE ID: CVE-2024-35349 State: PUBLISHED Published: 2024-05-30T16:20:38.130Z Last Updated: 2025-02-13T15:54:13.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/category/view_category.php. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298565/vuln4-blind-sql-injection-time-based
CVE ID: CVE-2024-35350 State: PUBLISHED Published: 2024-05-30T16:19:14.033Z Last Updated: 2025-02-13T15:54:13.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /admin/?page=borrow/view_borrow. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298666/vuln6-blind-sql-injection-time-based
CVE ID: CVE-2024-35351 State: PUBLISHED Published: 2024-05-30T16:18:10.045Z Last Updated: 2025-02-13T15:54:14.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/SystemSettings.php?f=update_settings. Manipulating the parameter name results in cross-site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298534/vuln2-execution-after-redirect-ear-stored-cross-site-scripting-xss
CVE ID: CVE-2024-35352 State: PUBLISHED Published: 2024-05-30T16:08:16.773Z Last Updated: 2025-02-13T15:54:14.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. This vulnerability impacts unidentified code within the file /classes/Users.php?f=save. Manipulating the parameter middlename results in cross-site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298742/vuln7-stored-cross-site-scripting-xss
CVE ID: CVE-2024-35353 State: PUBLISHED Published: 2024-05-30T16:06:53.927Z Last Updated: 2025-03-19T18:26:08.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the argument id can result in improper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298777/vuln8-insecure-direct-object-references-idor
CVE ID: CVE-2024-35354 State: PUBLISHED Published: 2024-05-30T16:04:44.161Z Last Updated: 2025-02-13T15:54:16.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298670/vuln9-error-based-sql-injection
CVE ID: CVE-2024-35355 State: PUBLISHED Published: 2024-05-30T16:03:33.740Z Last Updated: 2025-02-13T15:54:16.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298724/vuln10-blind-sql-injection-time-based
CVE ID: CVE-2024-35356 State: PUBLISHED Published: 2024-05-30T16:02:45.390Z Last Updated: 2025-02-13T15:58:31.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298676/vuln11-error-based-sql-injection
CVE ID: CVE-2024-35357 State: PUBLISHED Published: 2024-05-30T16:01:40.769Z Last Updated: 2025-02-13T15:58:31.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298672/vuln12-error-based-sql-injection
CVE ID: CVE-2024-35358 State: PUBLISHED Published: 2024-05-30T15:57:24.634Z Last Updated: 2025-02-13T15:58:32.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298731/vuln14-blind-sql-injection-time-based
CVE ID: CVE-2024-35359 State: PUBLISHED Published: 2024-05-30T16:16:47.699Z Last Updated: 2025-02-13T15:58:33.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_item. Manipulating the argument id can result in SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuln.pentester.stream/pentester-vulnerability-research/post/2298737/vuln15-blind-sql-injection-time-based
CVE ID: CVE-2024-35361 State: PUBLISHED Published: 2024-05-21T12:17:15.082Z Last Updated: 2025-02-13T15:58:33.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: MTab Bookmark v1.9.5 has an SQL injection vulnerability in /LinkStore/getIcon. An attacker can execute arbitrary SQL statements through this vulnerability without requiring any user rights. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/37
CVE ID: CVE-2024-35362 State: PUBLISHED Published: 2024-05-22T15:44:43.671Z Last Updated: 2025-03-27T21:01:44.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecshop 3.6 is vulnerable to Cross Site Scripting (XSS) via ecshop/article_cat.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/shopex/ecshop/issues/6
CVE ID: CVE-2024-35365 State: PUBLISHED Published: 2025-01-03T00:00:00 Last Updated: 2025-01-03T20:24:24.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/fftools/ffmpeg_mux_init.c#L886 - https://github.com/ffmpeg/ffmpeg/commit/ced5c5fdb8634d39ca9472a2026b2d2fea16c4e5 - https://gist.github.com/1047524396/d7d4ea8055b75c4a9f9bbcff31d21423
CVE ID: CVE-2024-35366 State: PUBLISHED Published: 2024-11-29T00:00:00 Last Updated: 2024-12-03T14:11:35.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavformat module. When parsing certain options, the software does not adequately validate the input. This allows for negative duration values to be accepted without proper bounds checking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ffmpeg/ffmpeg/commit/0bed22d597b78999151e3bde0768b7fe763fc2a6 - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/sbgdec.c#L389 - https:
ed22d597b78999151e3bde0768b7fe763fc2a6 - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavformat/sbgdec.c#L389 - https://gist.github.com/1047524396/1e72f170d58c2547ebd4db4cdf6cfabf
CVE ID: CVE-2024-35367 State: PUBLISHED Published: 2024-11-29T00:00:00.000Z Last Updated: 2025-11-03T20:37:34.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ffmpeg/ffmpeg/commit/09e6840cf7a3ee07a73c3ae88a020bf27ca1a667 - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/ppc/vp8dsp_altivec.c#L53 - https://gist.github.com/1047524396/9754a44845578358f6a403447c458ca4
CVE ID: CVE-2024-35368 State: PUBLISHED Published: 2024-11-29T00:00:00.000Z Last Updated: 2025-11-03T20:37:35.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ffmpeg/ffmpeg/commit/4513300989502090c4fd6560544dce399a8cd53c - https://github.com/FFmpeg/FFmpeg/blob/n7.0/libavcodec/rkmppdec.c#L466 - https://gist.github.com/1047524396/7e6e47220ae2b2d2fb4611f0d8a31ec5
CVE ID: CVE-2024-35369 State: PUBLISHED Published: 2024-11-29T00:00:00 Last Updated: 2024-11-29T17:11:05.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ffmpeg/ffmpeg/commit/0895ef0d6d6406ee6cd158fc4d47d80f201b8e9c - https://github.com/FFmpeg/FFm
nces: - https://github.com/ffmpeg/ffmpeg/commit/0895ef0d6d6406ee6cd158fc4d47d80f201b8e9c - https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/speexdec.c#L1423 - https://gist.github.com/1047524396/455093807666f2e351d674750c8cd0b8
CVE ID: CVE-2024-35371 State: PUBLISHED Published: 2024-11-29T00:00:00 Last Updated: 2024-12-02T16:25:17.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included in log entries without restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ant-media/ant-media-server/commit/4d4763bd4fd06e515c19544e5170ca0f34c9ce45 - https://github.com/ant-media/Ant-Me
hub.com/ant-media/ant-media-server/commit/4d4763bd4fd06e515c19544e5170ca0f34c9ce45 - https://github.com/ant-media/Ant-Media-Server/blob/ams-v2.8.2/src/main/java/io/antmedia/rest/RestServiceBase.java#L356 - https://gist.github.com/1047524396/4eb17867f2e375f4824274c5e7b4d384
CVE ID: CVE-2024-35373 State: PUBLISHED Published: 2024-05-24T20:28:45.269Z Last Updated: 2025-02-13T15:58:35.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/laowantong/mocodo/blob/11ca879060a68e06844058cd969c6379214cc2a8/web/rewrite.php#L45 - https://chocapikk.com/posts/2024/mocodo-vulnerabilities/
CVE ID: CVE-2024-35374 State: PUBLISHED Published: 2024-05-24T20:29:35.384Z Last Updated: 2025-02-13T15:58:36.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mocodo Mocodo Online 4.2.6 and below does not properly sanitize the sql_case input field in /web/generate.php, allowing remote attackers to execute arbitrary commands and potentially command injection, leading to remote code execution (RCE) under certain conditions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/laowantong/mocodo/blob/11ca879060a68e06844058cd969c6379214cc2a8/web/generate.php#L104-L158 - https://chocapikk.com/posts/2024/mocodo-vulnerabilities/
CVE ID: CVE-2024-35375 State: PUBLISHED Published: 2024-05-23T18:53:33.398Z Last Updated: 2025-02-13T15:58:36.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://shtaoism.com/ - https://gist.github.com/Tsq741/a16015209fa8728d505c4f82b4f518cd
CVE ID: CVE-2024-35384 State: PUBLISHED Published: 2024-05-21T13:38:34.570Z Last Updated: 2025-03-13T19:43:49.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/287
CVE ID: CVE-2024-35385 State: PUBLISHED Published: 2024-05-21T13:39:56.028Z Last Updated: 2025-02-13T15:58:37.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/288
CVE ID: CVE-2024-35386 State: PUBLISHED Published: 2024-05-21T13:36:14.289Z Last Updated: 2025-03-13T13:50:57.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cesanta/mjs/issues/286
CVE ID: CVE-2024-35387 State: PUBLISHED Published: 2024-05-24T18:05:29.300Z Last Updated: 2025-02-13T15:58:39.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/totolink%20LR350/loginAuth_http_host/README.md
CVE ID: CVE-2024-35388 State: PUBLISHED Published: 2024-05-24T18:08:57.640Z Last Updated: 2025-02-13T15:58:39.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20NR1800X/README.md
CVE ID: CVE-2024-35395 State: PUBLISHED Published: 2024-05-24T15:59:08.590Z Last Updated: 2025-02-13T15:58:40.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/HardcodeRoot/README.md
CVE ID: CVE-2024-35396 State: PUBLISHED Published: 2024-05-24T15:54:35.247Z Last Updated: 2025-02-13T15:58:40.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/README.md
CVE ID: CVE-2024-35397 State: PUBLISHED Published: 2024-05-28T14:33:46.331Z Last Updated: 2025-02-13T15:58:41.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/NTPSyncWithHost/README.md
CVE ID: CVE-2024-35398 State: PUBLISHED Published: 2024-05-28T14:38:04.495Z Last Updated: 2025-02-13T15:58:41.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setMacFilterRules/README.md
CVE ID: CVE-2024-35399 State: PUBLISHED Published: 2024-05-28T14:43:06.850Z Last Updated: 2025-02-13T15:58:42.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/loginAuth/README.md
CVE ID: CVE-2024-35400 State: PUBLISHED Published: 2024-05-28T14:46:26.621Z Last Updated: 2025-02-13T15:58:43.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/SetPortForwardRules/README.md
CVE ID: CVE-2024-35401 State: PUBLISHED Published: 2024-05-28T16:22:37.636Z Last Updated: 2025-02-13T15:58:43.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://totolink.com - https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/UploadFirmwareFile/README.md