deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36804
Published: 2022-08-25
Description: Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-88, CWE-78, CWE-88
References: http://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html; http://packetstormsecurity.com/files/171453/Bitbucket-7.0.0-Remote-Command-Execution.html; https://jira.atlassian.com/browse/BSERV-13438
CVE: CVE-2021-25642
Published: 2022-08-25
Description: ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/g6vf2h4wdgzzdgk91mqozhs58wotq150; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/g6vf2h4wdgzzdgk91mqozhs58wotq150
CVE: CVE-2022-36456
Published: 2022-08-25
Description: TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A720R/1; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/A720R/1
CVE: CVE-2022-36458
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/2/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/2/readme.md
CVE: CVE-2022-36459
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/3/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/3/readme.md
CVE: CVE-2022-36460
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/4/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/4/readme.md
CVE: CVE-2022-36461
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/5/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/5/readme.md
CVE: CVE-2022-36462
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/6/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/6/readme.md
CVE: CVE-2022-36463
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/8/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/8/readme.md
CVE: CVE-2022-36464
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/10/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/10/readme.md
CVE: CVE-2022-36465
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/9/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/9/readme.md
CVE: CVE-2022-36466
Published: 2022-08-25
Description: TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/7/readme.md; https://github.com/Darry-lang1/vuln/blob/main/TOTOLINK/A3700R/7/readme.md
CVE: CVE-2022-36467
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/4/readme.md; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/4/readme.md
CVE: CVE-2022-36468
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/5/readme.md; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/5/readme.md
CVE: CVE-2022-36469
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/7/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/7/readme.md
CVE: CVE-2022-36470
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/6/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/6/readme.md
CVE: CVE-2022-36471
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/2/readme.md; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/2/readme.md
CVE: CVE-2022-36472
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/8/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/8/readme.md
CVE: CVE-2022-36473
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/10/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/10/readme.md
CVE: CVE-2022-36474
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/9/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/9/readme.md
CVE: CVE-2022-36475
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/3/readme.md; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20B5Mini/3/readme.md
CVE: CVE-2022-36477
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/12/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/12/readme.md
CVE: CVE-2022-36478
Published: 2022-08-25
Description: H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/11/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/H3C%20B5Mini/11/readme.md
CVE: CVE-2022-36479
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/3; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/3
CVE: CVE-2022-36480
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/8; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/8
CVE: CVE-2022-36481
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/1; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/1
CVE: CVE-2022-36482
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/6; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/6
CVE: CVE-2022-36483
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/9; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/9
CVE: CVE-2022-36484
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/7; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/7
CVE: CVE-2022-36485
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/5; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/5
CVE: CVE-2022-36486
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/4; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/4
CVE: CVE-2022-36487
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/2; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/2
CVE: CVE-2022-36488
Published: 2022-08-25
Description: TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/10; https://github.com/Darry-lang1/vuln/tree/main/TOTOLINK/N350RT/10
CVE: CVE-2022-36489
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/1; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/1
CVE: CVE-2022-36490
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/5; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/5
CVE: CVE-2022-36491
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/2; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/2
CVE: CVE-2022-36492
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/4; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/4
CVE: CVE-2022-36493
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/8; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/8
CVE: CVE-2022-36494
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/7; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/7
CVE: CVE-2022-36495
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/6; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/6
CVE: CVE-2022-36496
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/9; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/9
CVE: CVE-2022-36497
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/10; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/10
CVE: CVE-2022-36498
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/3; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/3
CVE: CVE-2022-36499
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/19; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/19
CVE: CVE-2022-36500
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/13; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/13
CVE: CVE-2022-36501
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/16; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/16
CVE: CVE-2022-36502
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/18; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/18
CVE: CVE-2022-36503
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/17; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/17
CVE: CVE-2022-36504
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/11; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/11
CVE: CVE-2022-36505
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/20; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/20
CVE: CVE-2022-36506
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/14; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/14
CVE: CVE-2022-36507
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/12; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/12
CVE: CVE-2022-36508
Published: 2022-08-25
Description: H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/15; https://github.com/Darry-lang1/vuln/tree/main/H3C/H3C%20NX18%20Plus/15
CVE: CVE-2022-36509
Published: 2022-08-25
Description: H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/Darry-lang1/vuln/blob/main/H3C/GR3200/1/readme.md; https://github.com/Darry-lang1/vuln/blob/main/H3C/GR3200/1/readme.md
CVE: CVE-2022-36510
Published: 2022-08-25
Description: H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR2200/1; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR2200/1
CVE: CVE-2022-36511
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/2; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/2
CVE: CVE-2022-36513
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/5; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/5
CVE: CVE-2022-36514
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/1; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/1
CVE: CVE-2022-36515
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/4; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/4
CVE: CVE-2022-36516
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/3; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/3
CVE: CVE-2022-36517
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/7; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/7
CVE: CVE-2022-36518
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/8; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/8
CVE: CVE-2022-36519
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/9; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/9
CVE: CVE-2022-36520
Published: 2022-08-25
Description: H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/10; https://github.com/Darry-lang1/vuln/tree/main/H3C/GR-1200W/10