deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-46190
Published: 2023-10-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Novo-media Novo-Map : your WP posts on custom google maps plugin <= 1.1.2 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/novo-map/wordpress-novo-map-your-wp-posts-on-custom-google-maps-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/novo-map/wordpress-novo-map-your-wp-posts-on-custom-google-maps-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46191
Published: 2023-10-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Niels van Renselaar Open Graph Metabox plugin <= 1.4.4 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/open-graph-metabox/wordpress-open-graph-metabox-plugin-1-4-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/open-graph-metabox/wordpress-open-graph-metabox-plugin-1-4-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46193
Published: 2023-10-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Internet Marketing Ninjas Internal Link Building plugin <= 1.2.3 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/internal-link-building-plugin/wordpress-internal-link-building-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/internal-link-building-plugin/wordpress-internal-link-building-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46198
Published: 2023-10-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Scientech It Solution Appointment Calendar plugin <= 2.9.6 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/appointment-calendar/wordpress-appointment-calendar-plugin-2-9-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/appointment-calendar/wordpress-appointment-calendar-plugin-2-9-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46202
Published: 2023-10-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Auto Login New User After Registration plugin <= 1.9.6 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/auto-login-new-user-after-registration/wordpress-auto-login-new-user-after-registration-plugin-1-9-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/auto-login-new-user-after-registration/wordpress-auto-login-new-user-after-registration-plugin-1-9-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46204
Published: 2023-10-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in Muller Digital Inc. Duplicate Theme plugin <= 0.1.6 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/duplicate-theme/wordpress-duplicate-theme-plugin-0-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/duplicate-theme/wordpress-duplicate-theme-plugin-0-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46316
Published: 2023-10-25
Description: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-234
References: http://packetstormsecurity.com/files/176660/Traceroute-2.1.2-Privilege-Escalation.html; https://security-tracker.debian.org/tracker/CVE-2023-46316; https://sourceforge.net/projects/traceroute/files/traceroute/traceroute-2.1.3/
CVE: CVE-2023-46346
Published: 2023-10-25
Description: In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in the path name construction, a guest can perform a path traversal to view all files on the information system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://security.friendsofpresta.org/modules/2023/10/24/exportproducts.html; https://security.friendsofpresta.org/modules/2023/10/24/exportproducts.html
CVE: CVE-2023-46347
Published: 2023-10-25
Description: In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a guest can perform SQL injection. The method `NdkSpack::getPacks()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://security.friendsofpresta.org/modules/2023/10/24/ndk_steppingpack.html; https://security.friendsofpresta.org/modules/2023/10/24/ndk_steppingpack.html
CVE: CVE-2023-46358
Published: 2023-10-25
Description: In the module "Referral and Affiliation Program" (referralbyphone) version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method `ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/10/24/referralbyphone.html; https://security.friendsofpresta.org/modules/2023/10/24/referralbyphone.html
CVE: CVE-2023-46369
Published: 2023-10-25
Description: Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug1.md; https://github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug1.md
CVE: CVE-2023-46370
Published: 2023-10-25
Description: Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug2.md; https://github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug2.md
CVE: CVE-2023-46371
Published: 2023-10-25
Description: TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/TP-Link/TL-WDR7660/2.md; https://github.com/Jianchun-Ding/CVE-poc-update; https://github.com/Archerber/bug_submit/blob/main/TP-Link/TL-WDR7660/2.md
CVE: CVE-2023-46373
Published: 2023-10-25
Description: TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/TP-Link/TL-WDR7660/3.md; https://github.com/Archerber/bug_submit/blob/main/TP-Link/TL-WDR7660/3.md
CVE: CVE-2023-46396
Published: 2023-10-25
Description: Audimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via company parameter search filters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/file/d/13PK6RnYdq7fJKw47ssgLEsQvzHOJttLL/view?usp=sharing; https://drive.google.com/file/d/13PK6RnYdq7fJKw47ssgLEsQvzHOJttLL/view?usp=sharing
CVE: CVE-2023-46518
Published: 2023-10-25
Description: Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDeviceTokenSuccCB.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/MERCURY/A15/1/1.md; https://service.mercurycom.com.cn/download-2341.html; https://www.mercurycom.com.cn/
CVE: CVE-2023-46520
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function uninstallPluginReqHandle.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/1/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/1/1.md
CVE: CVE-2023-46521
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function RegisterRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/11/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/11/1.md
CVE: CVE-2023-46522
Published: 2023-10-25
Description: TP-LINK device TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 were discovered to contain a stack overflow via the function deviceInfoRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/Jianchun-Ding/CVE-POC-update2/tree/main; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/2/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]
CVE: CVE-2023-46523
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function upgradeInfoRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/3/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/3/1.md
CVE: CVE-2023-46525
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/12/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/12/1.md
CVE: CVE-2023-46526
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function resetCloudPwdRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/10/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/10/1.md
CVE: CVE-2023-46527
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 was discovered to contain a stack overflow via the function bindRequestHandle.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/Jianchun-Ding/CVE-poc-update; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/13/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]
CVE: CVE-2023-46534
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function modifyAccPwdRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/9/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/9/1.md
CVE: CVE-2023-46535
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getResetVeriRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/6/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/6/1.md
CVE: CVE-2023-46536
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkRegVeriRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/5/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/5/1.md
CVE: CVE-2023-46537
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/7/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/7/1.md
CVE: CVE-2023-46538
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkResetVeriRegister.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/4/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/4/1.md
CVE: CVE-2023-46539
Published: 2023-10-25
Description: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/8/1.md; https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=[PII_REDACTED]; https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/8/1.md
CVE: CVE-2023-46540
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formNtp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/11/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/11/1.md
CVE: CVE-2023-46541
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formIpv6Setup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/10/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/10/1.md
CVE: CVE-2023-46542
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formMeshUploadConfig.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/13/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/13/1.md
CVE: CVE-2023-46543
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formWlSiteSurvey.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/16/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/16/1.md
CVE: CVE-2023-46544
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formWirelessTbl.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/14/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/14/1.md
CVE: CVE-2023-46545
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formWsc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/17/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/17/1.md
CVE: CVE-2023-46546
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formStats.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/15/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/15/1.md
CVE: CVE-2023-46547
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formSysLog.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/12/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/12/1.md
CVE: CVE-2023-46548
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formWlanRedirect.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/1/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/1/1.md
CVE: CVE-2023-46549
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formSetLg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/18/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/18/1.md
CVE: CVE-2023-46550
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formMapDelDevice.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/21/1.md#2firmware-download-address; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/21/1.md#2firmware-download-address
CVE: CVE-2023-46551
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formReflashClientTbl.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/2/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/2/1.md
CVE: CVE-2023-46552
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formMultiAP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/19/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/19/1.md
CVE: CVE-2023-46553
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formParentControl.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/5/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/5/1.md
CVE: CVE-2023-46554
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formMapDel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/20/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/20/1.md
CVE: CVE-2023-46555
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formPortFw.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/3/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/3/1.md
CVE: CVE-2023-46556
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formFilter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/4/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/4/1.md
CVE: CVE-2023-46557
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formMultiAPVLAN.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/22/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/22/1.md
CVE: CVE-2023-46558
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formMapDelDevice.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/25/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/25/1.md
CVE: CVE-2023-46559
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formIPv6Addr.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/9/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/9/1.md
CVE: CVE-2023-46560
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formTcpipSetup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/23/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/23/1.md
CVE: CVE-2023-46562
Published: 2023-10-25
Description: TOTOLINK X2000R Gh v1.0.0-B20[PII_REDACTED].web was discovered to contain a stack overflow via the function formDosCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/8/1.md; https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36; https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/8/1.md