Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-29305 State: PUBLISHED Published: 2022-05-24T02:10:06 Last Updated: 2024-08-03T06:17:54.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helloxz/imgurl/issues/75
CVE ID: CVE-2022-29306 State: PUBLISHED Published: 2022-05-12T15:34:25 Last Updated: 2024-08-03T06:17:54.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ionize/ionize/issues/404
CVE ID: CVE-2022-29307 State: PUBLISHED Published: 2022-05-12T15:34:25 Last Updated: 2024-08-03T06:17:54.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ionize/ionize/issues/405
CVE ID: CVE-2022-29309 State: PUBLISHED Published: 2022-05-24T02:17:11 Last Updated: 2024-08-03T06:17:54.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wangl1989/mysiteforme/issues/43
CVE ID: CVE-2022-29315 State: PUBLISHED Published: 2022-04-19T14:57:59 Last Updated: 2024-08-03T06:17:54.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used. Additional Analyst Notes: - CVE Program Container: References: - https://the-it-wonders.blogspot.com/2022/04/csv-injection-in-acunetix-version.html
CVE ID: CVE-2022-29316 State: PUBLISHED Published: 2022-05-11T12:58:29 Last Updated: 2024-08-03T06:17:54.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancesearch. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/%40taidh/SyioJJGEq
CVE ID: CVE-2022-29317 State: PUBLISHED Published: 2022-05-11T12:58:29 Last Updated: 2024-08-03T06:17:54.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password parameters at /assets/partials/_handleLogin.php. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/%40taidh/r1FCJ1ME5
CVE ID: CVE-2022-29318 State: PUBLISHED Published: 2022-05-11T12:58:30 Last Updated: 2024-08-03T06:17:54.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/ITi4yd2-RgmDZh8FW-KTlA
CVE ID: CVE-2022-29320 State: PUBLISHED Published: 2022-05-20T12:53:18 Last Updated: 2024-08-03T06:17:54.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50859
CVE ID: CVE-2022-29321 State: PUBLISHED Published: 2022-05-10T13:16:52 Last Updated: 2024-08-03T06:17:54.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/4
CVE ID: CVE-2022-29322 State: PUBLISHED Published: 2022-05-10T13:16:53 Last Updated: 2024-08-03T06:17:54.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/5
CVE ID: CVE-2022-29323 State: PUBLISHED Published: 2022-05-10T13:16:51 Last Updated: 2024-08-03T06:17:54.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/3
CVE ID: CVE-2022-29324 State: PUBLISHED Published: 2022-05-10T13:16:50 Last Updated: 2024-08-03T06:17:54.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/6
CVE ID: CVE-2022-29325 State: PUBLISHED Published: 2022-05-10T13:16:50 Last Updated: 2024-08-03T06:17:54.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/8
CVE ID: CVE-2022-29326 State: PUBLISHED Published: 2022-05-10T13:16:49 Last Updated: 2024-08-03T06:17:54.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/7
CVE ID: CVE-2022-29327 State: PUBLISHED Published: 2022-05-10T13:16:54 Last Updated: 2024-08-03T06:17:54.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dir-816/9
CVE ID: CVE-2022-29328 State: PUBLISHED Published: 2022-05-10T13:16:48 Last Updated: 2024-08-03T06:17:54.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dap-1330/1
CVE ID: CVE-2022-29329 State: PUBLISHED Published: 2022-05-10T13:16:48 Last Updated: 2024-08-03T06:17:54.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/EPhaha/IOT_vuln/tree/main/d-link/dap-1330/2
CVE ID: CVE-2022-29330 State: PUBLISHED Published: 2022-06-24T15:20:01 Last Updated: 2024-08-03T06:17:54.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://vitalpbx.com - https://www.arsouyes.org/blog/2022/2022-06-30-VitalPBX-0day
CVE ID: CVE-2022-29332 State: PUBLISHED Published: 2022-05-17T13:39:59 Last Updated: 2024-08-03T06:17:54.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/d-link_dir-825_R2.pdf
CVE ID: CVE-2022-29333 State: PUBLISHED Published: 2022-05-24T20:55:51 Last Updated: 2024-08-03T06:17:54.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file. Additional Analyst Notes: - CVE Program Container: References: - http://power.com - http://cyberlink.com - https://www.youtube.com/watch?v=r75k-ae3_ng - https://youtu.be/B46wtd-ZNog
CVE ID: CVE-2022-29334 State: PUBLISHED Published: 2022-05-24T21:05:53 Last Updated: 2024-08-03T06:17:54.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in H v1.0 allows attackers to bypass authentication via a session replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SiJiDo/H/issues/27
CVE ID: CVE-2022-29337 State: PUBLISHED Published: 2022-05-24T21:26:31 Last Updated: 2024-08-03T06:17:54.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://east-trowel-102.notion.site/CVE-2022-XXXX-OS-CommandInjection-formlanipv6-043ddebec5a1456b92991048617c04e8
CVE ID: CVE-2022-29339 State: PUBLISHED Published: 2022-05-05T12:44:58 Last Updated: 2024-08-03T06:17:54.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2165 - https://github.com/gpac/gpac/commit/9ea93a2ec8f555ceed1ee27294cf94822f14f10f
CVE ID: CVE-2022-29340 State: PUBLISHED Published: 2022-05-05T12:46:44 Last Updated: 2024-08-03T06:17:55.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2163 - https://github.com/gpac/gpac/commit/37592ad86c6ca934d34740012213e467acc4a3b0
CVE ID: CVE-2022-29347 State: PUBLISHED Published: 2022-05-04T14:28:43 Last Updated: 2024-08-03T06:17:54.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - http://webarchiv.com - http://zeitpraxcom.com - https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2022-29347
CVE ID: CVE-2022-29349 State: PUBLISHED Published: 2022-05-24T23:21:51 Last Updated: 2024-08-03T06:17:54.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kekingcn/kkFileView/issues/347
CVE ID: CVE-2022-29351 State: PUBLISHED Published: 2022-05-16T13:28:55 Last Updated: 2024-11-20T15:25:43.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note: The vendor argues that this is not a legitimate issue and there is no vulnerability here. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jimcola99/corruptsvgfile - http://tiddlywiki5.com - https://github.com/Jermolene/TiddlyWiki5 - https://www.youtube.com/watch?v=F_DBx4psWns
CVE ID: CVE-2022-29353 State: PUBLISHED Published: 2022-05-16T13:28:43 Last Updated: 2024-08-03T06:17:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/2kHm_henVM4
CVE ID: CVE-2022-29354 State: PUBLISHED Published: 2022-05-16T13:28:42 Last Updated: 2024-08-03T06:17:54.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=DOM20FKpQQw
CVE ID: CVE-2022-29358 State: PUBLISHED Published: 2022-05-24T23:36:47 Last Updated: 2024-08-03T06:17:54.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in _parse_special_tag at sxmlc.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kevinboone/epub2txt2/issues/22
CVE ID: CVE-2022-29359 State: PUBLISHED Published: 2022-05-24T23:44:15 Last Updated: 2024-08-03T06:17:54.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /scas/?page=clubs/application_form&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html - https://zsecure.notion.site/School-Club-Application-a096d8c76073468783e0f9bd10436771
CVE ID: CVE-2022-29360 State: PUBLISHED Published: 2022-07-28T00:00:00 Last Updated: 2024-08-03T06:17:54.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message. Additional Analyst Notes: - CVE Program Container: References: - https://www.rainloop.net/changelog/ - https://blog.sonarsource.com/rainloop-emails-at-risk-due-to-code-flaw/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00027.html
CVE ID: CVE-2022-29361 State: PUBLISHED Published: 2022-05-24T23:56:15 Last Updated: 2024-08-03T06:17:54.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pallets/werkzeug/commit/9a3a981d70d2e9ec3344b5192f86fcaf3210cd85 - https
ram Container: References: - https://github.com/pallets/werkzeug/commit/9a3a981d70d2e9ec3344b5192f86fcaf3210cd85 - https://github.com/pallets/werkzeug/issues/2420
CVE ID: CVE-2022-29362 State: PUBLISHED Published: 2022-05-25T00:01:06 Last Updated: 2024-08-03T06:17:55.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ParentID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SeriaWei/ZKEACMS/issues/457
CVE ID: CVE-2022-29363 State: PUBLISHED Published: 2022-05-12T17:15:20 Last Updated: 2024-08-03T06:17:54.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to getshell via writing arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qinggan/phpok/issues/12
CVE ID: CVE-2022-29368 State: PUBLISHED Published: 2022-05-12T18:48:42 Last Updated: 2024-08-03T06:17:54.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/sources/xsDataView.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/896 - https://github.com/Moddable-OpenSource/moddable/commit/135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45
CVE ID: CVE-2022-29369 State: PUBLISHED Published: 2022-05-12T18:48:42 Last Updated: 2024-08-03T06:17:55.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/467 - https://github.com/nginx/njs/commit/222d6fdcf0c6485ec8e175f3a7b70d650c234b4e
CVE ID: CVE-2022-29376 State: PUBLISHED Published: 2022-05-23T20:16:04.000Z Last Updated: 2025-08-15T14:29:17.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ycdxsb/Vuln/blob/main/Xampp-Install-Dir-Incorrect-Default-Permission/Xampp-Install-Dir-Incorrect-Default-Permission.md - https://github.com/ycdxsb/Vuln/blob/main/CVE-2022-29376/CVE-2022-29376.md
CVE ID: CVE-2022-29377 State: PUBLISHED Published: 2022-05-24T01:24:07 Last Updated: 2024-08-03T06:17:55.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via the parameter CONTENT_LENGTH. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/molezsbd/iot-cve/tree/master/totolink/a3600r
CVE ID: CVE-2022-29379 State: PUBLISHED Published: 2022-05-25T12:56:33 Last Updated: 2024-08-03T06:17:54.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c. NOTE: multiple third parties dispute this report, e.g., the behavior is only found in unreleased development code that was not part of the 0.7.2, 0.7.3, or 0.7.4 release Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/491 - https://github.com/nginx/njs/issues/493 - https://github.com/nginx/njs/commit/ab1702c7af9959366a5ddc4a75b4357d4e9ebdc1
CVE ID: CVE-2022-29380 State: PUBLISHED Published: 2022-05-25T13:14:07 Last Updated: 2024-08-03T06:17:54.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49298
CVE ID: CVE-2022-29383 State: PUBLISHED Published: 2022-05-13T12:49:40 Last Updated: 2024-08-03T06:17:55.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - https://github.com/badboycxcc/Netgear-ssl-vpn-20211222
CVE ID: CVE-2022-29391 State: PUBLISHED Published: 2022-05-10T19:49:56 Last Updated: 2024-08-03T06:17:54.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/5.setStaticDhcpConfig
CVE ID: CVE-2022-29392 State: PUBLISHED Published: 2022-05-10T19:49:56 Last Updated: 2024-08-03T06:17:55.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/2.setPortForwardRules
CVE ID: CVE-2022-29393 State: PUBLISHED Published: 2022-05-10T19:49:57 Last Updated: 2024-08-03T06:17:55.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/3.setIpQosRules
CVE ID: CVE-2022-29394 State: PUBLISHED Published: 2022-05-10T19:49:58 Last Updated: 2024-08-03T06:17:55.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/1.setWiFiAclAddConfig
CVE ID: CVE-2022-29395 State: PUBLISHED Published: 2022-05-10T19:49:59 Last Updated: 2024-08-03T06:17:55.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/6.setWiFiRepeaterConfig
CVE ID: CVE-2022-29396 State: PUBLISHED Published: 2022-05-10T19:49:59 Last Updated: 2024-08-03T06:17:55.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d1tto/IoT-vuln/tree/main/Totolink/8.setIpPortFilterRules