Search vulnerabilities

Expected end of text, found ',' (at char 22), (line:1, col:23)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,865

CVE-2023-46580

Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Code-projects
Products
Inventory Management
CVE-2023-46575

A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Layer5
Products
Meshery
CVE-2023-46574

An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.

CVSS 3.1 · 9.8 Critical EPSS 65.3% KEV · Not listed
Vendors
Totolink
Products
A3700r A3700r Firmware
CVE-2023-46570

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2023-46569

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2023-46558

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46557

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46556

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46555

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46554

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46553

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46551

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware
CVE-2023-46550

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
X2000r X2000r Firmware