rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-46048 
Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-13T00:00:00.000Z
CVE-2024-46049 
Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-13T00:00:00.000Z
CVE-2024-46054 
OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-27T00:00:00.000Z
CVE-2024-46055 
OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in review names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-27T00:00:00.000Z
CVE-2024-46060 
Anaconda3 macOS installers before 2024.06-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-17T00:00:00.000Z
CVE-2024-46062 
Miniconda3 macOS installers before 23.11.0-1 contain a local privilege escalation vulnerability when installed outside the user's home directory. During installation, world-writable files are created and executed with root privileges. This flaw allows a local low-privileged user to inject arbitrary commands, leading to code execution as the root user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-17T00:00:00.000Z
CVE-2024-46073 
A reflected Cross-Site Scripting (XSS) vulnerability exists in the login page of IceHRM v32.4.0.OS. The vulnerability is due to improper sanitization of the "next" parameter, which is included in the application's response without adequate escaping. An attacker can exploit this flaw by tricking a user into visiting a specially crafted URL, causing the execution of arbitrary JavaScript code in the context of the victim's browser. The issue occurs even though the application has sanitization mechanisms in place.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-06T00:00:00.000Z
CVE-2024-46076 
RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-07T00:00:00.000Z
CVE-2024-46077 
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-46078 
itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function delete_category of the file sports_scheduling/player.php via the argument id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-04T00:00:00.000Z
CVE-2024-46079 
Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46080 
Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46081 
Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46082 
Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46083 
Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46084 
Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46085 
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-17T00:00:00.000Z
CVE-2024-46086 
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46088 
An arbitrary file upload vulnerability in the ProductAction.entphone interface of Zhejiang University Entersoft Customer Resource Management System v2002 to v2024 allows attackers to execute arbitrary code via uploading a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-46089 
74cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-18T00:00:00.000Z
CVE-2024-46097 
TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46101 
GDidees CMS <= v3.9.1 has a file upload vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-20T00:00:00.000Z
CVE-2024-46103 
SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-20T00:00:00.000Z
CVE-2024-46209 
A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-06T00:00:00.000Z
CVE-2024-46210 
An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-10T00:00:00.000Z
CVE-2024-46212 
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-16T00:00:00.000Z
CVE-2024-46213 
REDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-16T00:00:00.000Z
CVE-2024-46215 
A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-11T00:00:00.000Z
CVE-2024-46226 
A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-26T00:00:00.000Z
CVE-2024-46236 
CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-21T00:00:00.000Z
CVE-2024-46237 
PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-09T00:00:00.000Z
CVE-2024-46238 
Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-21T00:00:00.000Z
CVE-2024-46239 
Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-21T00:00:00.000Z
CVE-2024-46240 
Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-22T00:00:00.000Z
CVE-2024-46241 
PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and edit_product.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-23T00:00:00.000Z
CVE-2024-46242 
An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service (ReDoS) via supplying a crafted string as e-mail address during registration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-07T00:00:00.000Z
CVE-2024-46256 
A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46257 
A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46258 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46259 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46261 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46263 
cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46264 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46267 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46274 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46276 
cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-01T00:00:00.000Z
CVE-2024-46278 
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-07T00:00:00.000Z
CVE-2024-46280 
PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-30T00:00:00.000Z
CVE-2024-46292 
A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. NOTE: this is disputed by the Supplier because it cannot be reproduced. Also, the product's documentation indicates that it is not guaranteed to be usable with very large values of SecRequestBodyNoFilesLimit (which are required by the claimed issue).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-09T00:00:00.000Z
CVE-2024-46293 
Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether the user is logged in as an admin or even check for a session token at all.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-30T00:00:00.000Z
CVE-2024-46300 
itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-07T00:00:00.000Z
CVE-2024-46304 
A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-09T00:00:00.000Z
CVE-2024-46307 
A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-09T00:00:00.000Z
CVE-2024-46310 
Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-13T00:00:00.000Z
CVE-2024-46313 
TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-30T00:00:00.000Z
CVE-2024-46316 
DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-09T00:00:00.000Z
CVE-2024-46325 
TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-07T00:00:00.000Z
CVE-2024-46326 
Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-21T00:00:00.000Z
CVE-2024-46327 
An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-26T00:00:00.000Z
CVE-2024-46328 
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-26T00:00:00.000Z
CVE-2024-46329 
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-26T00:00:00.000Z
CVE-2024-46330 
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-26T00:00:00.000Z
CVE-2024-46331 
ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46333 
An authenticated cross-site scripting (XSS) vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46334 
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-46335 
PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-46336 
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-17T00:00:00.000Z
CVE-2024-46340 
TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-10T00:00:00.000Z
CVE-2024-46341 
TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-10T00:00:00.000Z
CVE-2024-46362 
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-17T00:00:00.000Z
CVE-2024-46366 
A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46367 
A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within the username field. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-27T00:00:00.000Z
CVE-2024-46372 
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46373 
Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46374 
Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46375 
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46376 
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46377 
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-18T00:00:00.000Z
CVE-2024-46382 
A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-09-19T00:00:00.000Z
CVE-2024-46383 
Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected devices in plaintext.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-15T00:00:00.000Z