Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-24992 State: PUBLISHED Published: 2022-07-25T17:39:35 Last Updated: 2024-08-03T04:29:01.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the component process.php of QR Code Generator v5.2.7 allows attackers to perform directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://qrcdr.com - https://codecanyon.net/item/qrcdr-responsive-qr-code-generator/9226839 - https://n0lsec.medium.com/qrcdr-path-traversal-vulnerability-bb89acc0c100
CVE ID: CVE-2022-24995 State: PUBLISHED Published: 2022-03-09T18:54:53 Last Updated: 2024-08-03T04:29:01.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the time parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX3/7
CVE ID: CVE-2022-24999 State: PUBLISHED Published: 2022-11-26T00:00:00.000Z Last Updated: 2025-04-29T13:56:42.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3
0. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: qs@6.9.7" in its release description, is not vulnerable). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/expressjs/express/releases/tag/4.17.3 - https://github.com/ljharb/qs/pull/428 - https://github.com/n8tz/CVE-2022-24999 - https://lists.debian.org/debian-lts-announce/2023/01/msg00039.html - https://security.netapp.com/advisory/ntap-20230908-0005/
CVE ID: CVE-2022-25003 State: PUBLISHED Published: 2022-02-24T18:17:57 Last Updated: 2024-08-03T04:29:01.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/view_doctor.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/09-by-ly/HPRMS-SQL_injection/blob/gh-pages/SQL%20injection.md - https://www.nu11secur1ty.com/2022/03/cve-2022-25003.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-25003
CVE ID: CVE-2022-25004 State: PUBLISHED Published: 2022-02-24T18:17:59 Last Updated: 2024-08-03T04:29:01.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/manage_doctor.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/09-by-ly/HPRMS-SQL_injection/blob/gh-pages/SQL%20injection.md - https://www.nu11secur1ty.com/2022/03/cve-2022-25004.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-25004/
CVE ID: CVE-2022-25008 State: PUBLISHED Published: 2022-03-30T22:27:00 Last Updated: 2024-08-03T04:29:01.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chibataiki/iot-vuls/blob/main/totolink/missing-authentication.md
CVE ID: CVE-2022-25010 State: PUBLISHED Published: 2022-03-01T22:24:03 Last Updated: 2024-08-03T04:29:01.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/stepmania/stepmania/pull/2184
CVE ID: CVE-2022-25012 State: PUBLISHED Published: 2022-03-01T22:38:47 Last Updated: 2024-08-03T04:29:01.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argus Surveillance DVR v4.0 employs weak password encryption. Additional Analyst Notes: - CVE Program Container: References: - https://leobreaker1411.github.io/blog/dvr4-hash-crack - https://www.exploit-db.com/exploits/50130
CVE ID: CVE-2022-25013 State: PUBLISHED Published: 2022-02-28T18:57:30 Last Updated: 2024-08-03T04:29:01.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the "key" and "fm" parameters in the component login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gamonoid/icehrm/issues/284
CVE ID: CVE-2022-25014 State: PUBLISHED Published: 2022-02-28T18:57:32 Last Updated: 2024-08-03T04:29:01.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "m" parameter in the Dashboard of the current user. This vulnerability allows attackers to compromise session credentials via user interaction with a crafted link. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gamonoid/icehrm/issues/283
CVE ID: CVE-2022-25015 State: PUBLISHED Published: 2022-02-28T18:57:33 Last Updated: 2024-08-03T04:29:01.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gamonoid/icehrm/issues/285
CVE ID: CVE-2022-25016 State: PUBLISHED Published: 2022-03-02T16:41:52 Last Updated: 2024-08-03T04:29:01.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lohyt/web-shell-via-file-upload-in-hocms
CVE ID: CVE-2022-25017 State: PUBLISHED Published: 2022-04-01T05:41:29 Last Updated: 2024-08-03T04:29:01.602Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/zaee-k/390b2f8e50407e4b199df806baa7e4ef
CVE ID: CVE-2022-25018 State: PUBLISHED Published: 2022-03-01T01:25:11 Last Updated: 2024-08-03T04:29:01.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages. Additional Analyst Notes: - CVE Program Container: References: - http://pluxml.com - https://github.com/pluxml/PluXml - https://youtu.be/Gbe2UNCB0tY - https://github.com/MoritzHuppert/CVE-2022-25018/blob/main/CVE-2022-25018.pdf
CVE ID: CVE-2022-25019 State: REJECTED Published: 2022-02-25T18:11:15 Last Updated: 2022-02-25T18:11:15 Description: No description available.
CVE ID: CVE-2022-25020 State: PUBLISHED Published: 2022-03-01T01:26:20 Last Updated: 2024-08-03T04:29:01.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post. Additional Analyst Notes: - CVE Program Container: References: - http://pluxml.com - https://www.cvedetails.com/cve/CVE-2021-38602/ - https://youtu.be/TsGp-QB5XWI - https://github.com/MoritzHuppert/CVE-2022-25020/blob/main/CVE-2022-25020.pdf
CVE ID: CVE-2022-25022 State: PUBLISHED Published: 2022-03-01T01:27:34 Last Updated: 2024-08-03T04:29:01.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a crafted payload in the content field of a blog post. Additional Analyst Notes: - CVE Program Container: References: - http://danpros.com - http://htmly.com - https://www.cvedetails.com/cve/CVE-2021-36703/ - https://youtu.be/acookTqf3Nc - https://github.com/MoritzHuppert/CVE-2022-25022/blob/main/CVE-2022-25022.pdf
CVE ID: CVE-2022-25023 State: PUBLISHED Published: 2022-02-28T18:33:48 Last Updated: 2024-08-03T04:29:01.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function fouBytesToInt():AudioFile.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/adamstark/AudioFile/issues/58
CVE ID: CVE-2022-25024 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:46:39.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vinitkumar/json2xml/issues/106 - https://github.com/vinitkumar/json2xml/pull/107 - https://github.com/vinitkumar/json2xml/pull/107/files - https://packaging.python.org/en/latest/guides/analyzing-pypi-package-downloads/
CVE ID: CVE-2022-25026 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:18:09.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.nettitude.com/blog/cve-2022-25026-cve-2022-25027-vulnerabilities-in-rocket-trufusion-enterprise/
CVE ID: CVE-2022-25027 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T14:15:57.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user's session token when the "Password forgotten?" button is clicked. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.nettitude.com/blog/cve-2022-25026-cve-2022-25027-vulnerabilities-in-rocket-trufusion-enterprise/
CVE ID: CVE-2022-25028 State: PUBLISHED Published: 2022-02-28T22:55:16 Last Updated: 2024-08-03T04:29:01.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections module. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/fuzzyap1/Vendors-System-Vulnerabilities/main/Home%20Owners%20Collection%20Management%20System/xss.md
CVE ID: CVE-2022-25029 State: REJECTED Published: 2022-02-28T22:55:16 Last Updated: 2022-06-13T16:55:48 Description: No description available.
CVE ID: CVE-2022-25031 State: PUBLISHED Published: 2022-03-03T14:04:56 Last Updated: 2024-08-03T04:29:01.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate privileges to the system level. Additional Analyst Notes: - CVE Program Container: References: - https://www.rdpsoft.com/uqspvuln/ - https://hansesecure.de/2022/02/vulnerability-in-remote-desktop-commander-suite-agent/?lang=en
CVE ID: CVE-2022-25037 State: PUBLISHED Published: 2024-05-31T16:05:30.670Z Last Updated: 2025-02-13T15:46:21.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in wanEditor v4.7.11 and fixed in v.4.7.12 and v.5 was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wangeditor-team/wangEditor/issues/3870 - https://gist.github.com/Mdxjj/5cf0a31e8abf24ed688ceb5b3543516d
CVE ID: CVE-2022-25038 State: PUBLISHED Published: 2024-05-31T16:02:57.143Z Last Updated: 2025-02-13T15:46:21.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: wanEditor v4.7.11 was discovered to contain a cross-site scripting (XSS) vulnerability via the video upload function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wangeditor-team/wangEditor/issues/3872 - https://gist.github.com/Mdxjj/800f05f10a98591aa2cf3558f53f088f
CVE ID: CVE-2022-25041 State: PUBLISHED Published: 2022-03-23T21:27:00 Last Updated: 2024-08-03T04:29:01.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEMR v6.0.0 was discovered to contain an incorrect access control issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.open-emr.org/ - https://github.com/openemr - https://securityforeveryone.com/blog/openemr-0-day-incorrect-access-control-vulnerability-cve-2022-25041
CVE ID: CVE-2022-25044 State: PUBLISHED Published: 2022-03-05T01:01:56 Last Updated: 2024-08-03T04:29:01.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espruino/Espruino/issues/2142 - https://github.com/espruino/Espruino/commit/e069be2ecc5060ef47391716e4de94999595b260
CVE ID: CVE-2022-25045 State: PUBLISHED Published: 2022-03-02T20:51:03 Last Updated: 2024-08-03T04:29:01.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VivekPanday12/CVE-/issues/6 - https://www.linkedin.com/in/vivek-panday-796768149/
CVE ID: CVE-2022-25046 State: PUBLISHED Published: 2022-07-07T11:28:59 Last Updated: 2024-08-03T04:29:01.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Immersive-Labs-Sec/CentOS-WebPanel
CVE ID: CVE-2022-25047 State: PUBLISHED Published: 2022-07-07T11:29:09 Last Updated: 2024-08-03T04:29:01.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset token in CWP v0.9.8.1126 is generated using known or predictable values. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Immersive-Labs-Sec/CentOS-WebPanel
CVE ID: CVE-2022-25048 State: PUBLISHED Published: 2022-07-07T11:29:20 Last Updated: 2024-08-03T04:29:01.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Immersive-Labs-Sec/CentOS-WebPanel
CVE ID: CVE-2022-25050 State: PUBLISHED Published: 2022-03-01T23:46:52 Last Updated: 2024-08-03T04:29:01.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6c9cd35f-a206-4fdf-b6d1-fcd50926c2d9/ - https://github.com/merbanan/rtl_433/issues/1960 - https://github.com/merbanan/rtl_433/commit/2dad7b9fc67a1d0bfbe520fbd821678b8f8cc7a8
CVE ID: CVE-2022-25051 State: PUBLISHED Published: 2022-03-01T23:47:09 Last Updated: 2024-08-03T04:29:01.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/merbanan/rtl_433/issues/1960 - https://github.com/merbanan/rtl_433/commit/2dad7b9fc67a1d0bfbe520fbd821678b8f8cc7a8 - https://huntr.dev/bounties/78eee103-bd61-4b4f-b054-04ad996b39e7/
CVE ID: CVE-2022-25060 State: PUBLISHED Published: 2022-02-25T19:38:56 Last Updated: 2024-08-03T04:29:01.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://router.com - https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_startPing-EN-939c748c5f244504899477114b1ca1cf
CVE ID: CVE-2022-25061 State: PUBLISHED Published: 2022-02-25T19:39:02 Last Updated: 2024-08-03T04:29:01.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://router.com - https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_setIp6DefaultRoute-EN-ddf9c1db199d49829269147ada6cb312
CVE ID: CVE-2022-25062 State: PUBLISHED Published: 2022-02-25T19:38:58 Last Updated: 2024-08-03T04:29:01.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://router.com - https://east-trowel-102.notion.site/CVE-2021-XXXX-RCE-Integer-Overflow-via-crafted-payload-in-an-DNS-input-field-userDomain-EN-2bc0fafd23224a5a8f86f5f0f9377d3d
CVE ID: CVE-2022-25064 State: PUBLISHED Published: 2022-02-25T19:38:59 Last Updated: 2024-08-03T04:29:01.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://router.com - https://east-trowel-102.notion.site/CVE-2021-XXXX-rce-via-crafted-payload-in-an-ipv6-address-input-field-hidden-EN-98e24b6f841043fba17ec4627c34f5d1
CVE ID: CVE-2022-25069 State: PUBLISHED Published: 2022-03-05T00:29:01 Last Updated: 2024-08-03T04:29:01.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/marktext/marktext/issues/2990 - https://github.com/marktext/marktext/pull/3002
CVE ID: CVE-2022-25072 State: PUBLISHED Published: 2022-02-22T22:44:05 Last Updated: 2024-08-03T04:29:01.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TP-Link/Archer%20A54
CVE ID: CVE-2022-25073 State: PUBLISHED Published: 2022-02-22T22:44:05 Last Updated: 2024-08-03T04:29:01.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthenticated attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TP-Link/TL-WR841N
CVE ID: CVE-2022-25074 State: PUBLISHED Published: 2022-02-22T22:44:06 Last Updated: 2024-08-03T04:29:01.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/tree/main/TP-Link/TL-WR902AC
CVE ID: CVE-2022-25075 State: PUBLISHED Published: 2022-02-22T22:44:07 Last Updated: 2024-08-03T04:29:01.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/A3000RU/README.md
CVE ID: CVE-2022-25076 State: PUBLISHED Published: 2022-02-22T22:44:07 Last Updated: 2024-08-03T04:29:01.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/A800R/README.md
CVE ID: CVE-2022-25077 State: PUBLISHED Published: 2022-02-22T22:44:08 Last Updated: 2024-08-03T04:29:01.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/A3100R/README.md
CVE ID: CVE-2022-25078 State: PUBLISHED Published: 2022-02-22T22:44:08 Last Updated: 2024-08-03T04:29:01.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/A3600R/README.md
CVE ID: CVE-2022-25079 State: PUBLISHED Published: 2022-02-22T22:44:09 Last Updated: 2024-08-03T04:29:01.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/A810R/README.md