Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.Check if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter.Check if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK A810R V4.1.2cu.5182_B20201026 and A950RG V4.1.2cu.5161_B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function thCheck if you run itEPSS 1.23%Apr 22, 2025
- Critical9.8TOTOLINK a950rg_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.36%Apr 22, 2025
- Critical9.8TOTOLINK A830R V4.1.2cu.5182_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter.Check if you run itEPSS 1.36%Apr 22, 2025
- Critical9.8TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 1.36%Apr 22, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.Check if you run itEPSS 0.34%Apr 22, 2025
- Medium6.5TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.Check if you run itEPSS 0.30%Apr 22, 2025
- High8.8TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRules function.Check if you run itEPSS 0.47%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 was found to contain a buffer overflow vulnCheck if you run itEPSS 0.40%Apr 22, 2025
- High7.3TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulCheck if you run itEPSS 0.40%Apr 22, 2025
- Critical9.8TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgiCheck if you run itEPSS 0.56%Apr 22, 2025
- Medium6.1Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature.Check if you run itEPSS 0.31%Apr 22, 2025
- UnknownCVE-2025-20229 is named in a Cloudflare managed-rules release.Check this weekEPSS 16.02%Apr 22, 2025
- Critical9.3ALAS-2025-1980 (important): pppCheck if you run itEPSS 0.24%Apr 22, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitraryCheck if you run itEPSS 0.23%Apr 22, 2025
- Medium5.4A stored cross-site scripting (XSS) vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary webCheck if you run itEPSS 0.23%Apr 22, 2025
- High7.3NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter.Check if you run itEPSS 0.47%Apr 22, 2025
- Critical9.8An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted scriptCheck if you run itEPSS 0.77%Apr 22, 2025
- High7.3A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input pathCheck if you run itEPSS 0.64%Apr 22, 2025
- High7.7An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.Check if you run itEPSS 0.85%Apr 22, 2025
- Critical9.8Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php.Check if you run itEPSS 0.55%Apr 22, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into tCheck if you run itEPSS 0.30%Apr 22, 2025
Sort