Search vulnerabilities

Expected end of text, found '/' (at char 42), (line:1, col:43)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,863

CVE-2023-51035

TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Totolink
Products
Ex1200l Ex1200l Firmware
CVE-2023-51034

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Totolink
Products
Ex1200l Ex1200l Firmware
CVE-2023-51033

TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1200l Ex1200l Firmware
CVE-2023-51028

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51027

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51026

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51025

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51024

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51023

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51022

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51021

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51019

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51017

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51016

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51015

TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51014

TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51013

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51012

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLanConfig interface of the cstecgi .cgi.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51011

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex1800t Ex1800t Firmware
CVE-2023-51010

An issue in the export component AdSdkH5Activity of com.sdjictec.qdmetro v4.2.2 allows attackers to open a crafted URL without any filtering or checking.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qd-metro
Products
Qingdao Metro