Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9,054

Export CSV
CVE-2023-46424

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46423

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46422

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46421

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46418

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46416

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46413

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46412

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46411

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46410

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46409

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46408

TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Totolink
Products
X6000r X6000r Firmware
CVE-2023-46370

Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

CVSS 3.1 · 9.8 Critical EPSS 18.4% KEV · Not listed
Vendors
Tenda
Products
W18e W18e Firmware
CVE-2023-46130

Bypassing height value allowed in some theme components

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some theme components allow users to add svgs with unlimited `height` attributes, and this can affect the availability of subsequent replies in a topic. Most Discourse instances are unaffected, only instances with the svgbob or the mermaid theme component are within scope. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. As a workaround, disable or remove the relevant theme components.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Discourse
Products
Discourse
CVE-2023-45852

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.

CVSS 3.1 · 9.8 Critical EPSS 15.2% KEV · Not listed
Vendors
Viessmann
Products
Vitogate 300 Vitogate 300 Firmware