Search vulnerabilities

Expected end of text, found 'én' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,866

CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37080

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37079

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37076

TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37075

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A7000r A7000r Firmware
CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
H3c
Products
Gr-1200w Firmware Gr-120w
CVE-2022-37072

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
Gr-1200w Gr-1200w Firmware
CVE-2022-37070

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.

CVSS 3.1 · 9.8 Critical EPSS 10.8% KEV · Not listed
Vendors
H3c
Products
Gr-1200w Gr-1200w Firmware
CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
Gr-1200w Gr-1200w Firmware
CVE-2022-37067

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
Gr-1200w Gr-1200w Firmware
CVE-2022-37059

Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Intelliants
Products
Subrion Cms
CVE-2022-37049

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Broadcom Fedoraproject
Products
Tcpreplay Fedora
CVE-2022-37048

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Broadcom Fedoraproject
Products
Tcpreplay Fedora