Search vulnerabilities

Expected end of text, found '\u200b' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,829

CVE-2023-51051

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
S-cms
Products
S-cms
CVE-2023-51050

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
S-cms
Products
S-cms
CVE-2023-51049

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
S-cms
Products
S-cms
CVE-2023-51048

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
S-cms
Products
S-cms
CVE-2023-51043

kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c

In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Eus and 1 more
CVE-2023-51042

kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c

In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Logging and 2 more
CVE-2023-51035

TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Totolink
Products
Ex1200l Ex1200l Firmware
CVE-2023-51034

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
Ex1200l Ex1200l Firmware
CVE-2023-51033

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1200l Ex1200l Firmware
CVE-2023-51028

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51027

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51026

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51025

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51024

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51023

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51022

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51021

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51019

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51017

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51016

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware