rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-36461 
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:28.000Z
CVE-2022-36462 
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:29.000Z
CVE-2022-36463 
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:30.000Z
CVE-2022-36464 
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:31.000Z
CVE-2022-36465 
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:37.000Z
CVE-2022-36466 
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:41.000Z
CVE-2022-36467 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:42.000Z
CVE-2022-36468 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:42.000Z
CVE-2022-36469 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:45.000Z
CVE-2022-36470 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:48.000Z
CVE-2022-36471 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:45.000Z
CVE-2022-36472 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:53:48.000Z
CVE-2022-36473 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:14.000Z
CVE-2022-36474 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:27.000Z
CVE-2022-36475 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:14.000Z
CVE-2022-36477 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:27.000Z
CVE-2022-36478 
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:27.000Z
CVE-2022-36479 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the function NTPSyncWithHost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:32.000Z
CVE-2022-36480 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:36.000Z
CVE-2022-36481 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setDiagnosisCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:37.000Z
CVE-2022-36482 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:38.000Z
CVE-2022-36483 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:54:40.000Z
CVE-2022-36484 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:11.000Z
CVE-2022-36485 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:12.000Z
CVE-2022-36486 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:12.000Z
CVE-2022-36487 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:13.000Z
CVE-2022-36488 
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:14.000Z
CVE-2022-36489 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:33.000Z
CVE-2022-36490 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:58.000Z
CVE-2022-36491 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:42.000Z
CVE-2022-36492 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:13.000Z
CVE-2022-36493 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:54.000Z
CVE-2022-36494 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:55:35.000Z
CVE-2022-36495 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:06.000Z
CVE-2022-36496 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:23.000Z
CVE-2022-36497 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:06.000Z
CVE-2022-36498 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:21.000Z
CVE-2022-36499 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:02.000Z
CVE-2022-36500 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:21.000Z
CVE-2022-36501 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:56:21.000Z
CVE-2022-36502 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:02.000Z
CVE-2022-36503 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:03.000Z
CVE-2022-36504 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:03.000Z
CVE-2022-36505 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:03.000Z
CVE-2022-36506 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:03.000Z
CVE-2022-36507 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:04.000Z
CVE-2022-36508 
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:14.000Z
CVE-2022-36509 
H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:05.000Z
CVE-2022-36510 
H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:16.000Z
CVE-2022-36511 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:19.000Z
CVE-2022-36513 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:19.000Z
CVE-2022-36514 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:19.000Z
CVE-2022-36515 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:19.000Z
CVE-2022-36516 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:31.000Z
CVE-2022-36517 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:22.000Z
CVE-2022-36518 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:58:32.000Z
CVE-2022-36519 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T14:00:18.000Z
CVE-2022-36520 
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T13:59:56.000Z
CVE-2022-36521 
Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T13:52:36.000Z
CVE-2022-36522 
Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T17:57:36.000Z
CVE-2022-36523 
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T16:30:52.000Z
CVE-2022-36524 
D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T16:33:54.000Z
CVE-2022-36525 
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T16:36:21.000Z
CVE-2022-36526 
D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T16:39:54.000Z
CVE-2022-36527 
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-25T18:46:06.000Z
CVE-2022-36529 
Kensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name and oldname parameters at /framework/mod/db/DBMapper.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T18:10:34.000Z
CVE-2022-36530 
An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the info.php page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T12:39:36.000Z
CVE-2022-36532 
Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:26:31.000Z
CVE-2022-36533 
Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain a cross-site scripting (XSS) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:33:02.000Z
CVE-2022-36534 
Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution (RCE) vulnerabilities via the Job_ExecuteBefore and Job_ExecuteAfter parameters at post_profilesettings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T00:00:00.000Z
CVE-2022-36536 
An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:37:07.000Z
CVE-2022-36537 
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T00:00:00.000Z
CVE-2022-36539 
WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-07T16:22:41.000Z
CVE-2022-36542 
An access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1 allows attackers to arbitrarily edit, read, and delete Administrator data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:48.000Z
CVE-2022-36543 
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:50.000Z
CVE-2022-36544 
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:50.000Z
CVE-2022-36545 
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:51.000Z
CVE-2022-36546 
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery (CSRF) via /patient/settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:52.000Z
CVE-2022-36547 
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /patient/index.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:52.000Z
CVE-2022-36548 
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability at /patient/settings.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-26T20:37:53.000Z
CVE-2022-36551 
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in these versions of Label Studio enabling a remote attacker to create a new account and then exploit the SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-03T00:00:00.000Z
CVE-2022-36552 
Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T15:07:39.000Z
CVE-2022-36553 
Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:17.000Z
CVE-2022-36554 
A command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec Inter HWL-2511-SS v1.05 and below allows attackers to execute arbitrary commands with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:18.000Z
CVE-2022-36555 
Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:18.000Z
CVE-2022-36556 
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at 07system08execute_ping_01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:19.000Z
CVE-2022-36557 
Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup function. This vulnerability allows attackers to execute arbitrary code via a crafted html file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:20.000Z
CVE-2022-36558 
Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account. Attackers are able to access the passcord via the file /etc/ciel.cfg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:21.000Z
CVE-2022-36559 
Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_exec.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:21.000Z
CVE-2022-36560 
Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root. Attackers are able to access the passcodes at /etc/srapi/config/system.conf and /usr/sbin/ssol-sshd.sh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-29T22:46:22.000Z
CVE-2022-36561 
XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-30T20:05:52.000Z