CVE-2022-44843 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2022-11-25 | 2025-04-29 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/set…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function. |
CVE-2022-35744 | CRITICAL | 9.8 | 0.01979 | 39.89 | No | No | 2023-05-31 | 2025-01-02 | euvd | Windows Point-to-Point Protocol (PPP) Remote Code Execution VulnerabilityWindows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
CVE-2022-48123 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2023-01-20 | 2025-04-03 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setti…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function. |
CVE-2022-48121 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2023-01-20 | 2025-04-03 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function. |
CVE-2022-48122 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2023-01-20 | 2025-04-03 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function. |
CVE-2022-48126 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2023-01-20 | 2025-04-03 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function. |
CVE-2022-48125 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2023-01-20 | 2025-04-03 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function. |
CVE-2025-29269 | CRITICAL | 9.8 | 0.01964 | 39.89 | No | No | 2025-12-04 | 2026-07-05 | euvd | ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoin…ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint. |
CVE-2023-6069 | CRITICAL | 9.9 | 0.00836 | 39.89 | No | No | 2023-11-10 | 2024-08-02 | euvd | Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0. |
CVE-2022-44844 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2022-11-25 | 2025-04-29 | euvd | TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/set…TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function. |
CVE-2023-3545 | CRITICAL | 9.8 | 0.01963 | 39.89 | No | No | 2023-11-28 | 2024-08-02 | euvd | Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthentic…Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to bypass file upload security protections and obtain remote code execution via uploading of `.htaccess` file. This vulnerability may be exploited by privileged attackers or chained with unauthenticated arbitrary file write vulnerabilities, such as CVE-2023-3533, to achieve remote code execution. |
CVE-2021-21821 | CRITICAL | 9.8 | 0.01963 | 39.89 | No | No | 2021-07-08 | 2024-08-03 | euvd | A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially crafted…A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. |
CVE-2022-31605 | CRITICAL | 9.8 | 0.01976 | 39.89 | No | No | 2022-07-01 | 2024-08-03 | euvd | NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.…NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity. |
CVE-2023-25696 | CRITICAL | 9.8 | 0.01982 | 39.89 | No | No | 2023-02-24 | 2024-10-23 | euvd | Improper Input Validation vulnerability in the Apache Airflow Hive Provider.
This issue affects Apache Airflow Hive Provider versions befor…Improper Input Validation vulnerability in the Apache Airflow Hive Provider.
This issue affects Apache Airflow Hive Provider versions before 5.1.3. |
CVE-2023-29363 | CRITICAL | 9.8 | 0.01959 | 39.89 | No | No | 2023-06-13 | 2025-01-01 | euvd | Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityWindows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-5604 | CRITICAL | 9.8 | 0.01964 | 39.89 | No | No | 2023-11-27 | 2025-06-05 | euvd | The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecur…The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to remote code execution. |
CVE-2026-47370 | CRITICAL | 9.9 | 0.00834 | 39.89 | No | No | 2026-06-12 | 2026-06-13 | euvd | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain de…A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances. |
CVE-2023-33556 | CRITICAL | 9.8 | 0.01958 | 39.89 | No | No | 2023-06-07 | 2025-01-07 | euvd | TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/se…TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg. |
CVE-2024-20997 | CRITICAL | 9.9 | 0.00833 | 39.89 | No | No | 2024-04-16 | 2025-03-13 | euvd | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). …Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. While the vulnerability is in Oracle Hospitality Simphony, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). |
CVE-2023-27040 | CRITICAL | 9.8 | 0.01982 | 39.89 | No | No | 2023-03-16 | 2025-02-26 | euvd | Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter. |
CVE-2026-28672 | CRITICAL | 9.8 | 0.01975 | 39.89 | No | No | 2026-08-10 | 2026-08-12 | euvd, nvd | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.
This issue affects Apac…Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.
This issue affects Apache Ranger: from 0.6 through 2.8. |
CVE-2023-45161 | CRITICAL | 9.9 | 0.00828 | 39.89 | No | No | 2023-11-06 | 2025-06-18 | euvd | The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate…The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients.
To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-URLResponseTime instruction to v20.1 by uploading it through the 1E Platform instruction upload UI |
CVE-2022-31604 | CRITICAL | 9.8 | 0.01976 | 39.89 | No | No | 2022-07-01 | 2024-08-03 | euvd | NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pi…NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity. |
CVE-2020-7715 | CRITICAL | 9.8 | 0.01965 | 39.89 | No | No | 2020-09-01 | 2024-09-16 | euvd | All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function. |
CVE-2024-34411 | CRITICAL | 9.9 | 0.00826 | 39.89 | No | No | 2024-05-13 | 2026-04-28 | euvd | Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/…Unrestricted Upload of File with Dangerous Type vulnerability in Thomas Scholl canvasio3D Light.This issue affects canvasio3D Light: from n/a through 2.5.0. |
CVE-2024-36604 | CRITICAL | 9.8 | 0.01975 | 39.89 | No | No | 2024-06-04 | 2025-02-13 | euvd | Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerabilit…Tenda O3V2 v1.0.0.12(3880) was discovered to contain a Blind Command Injection via stpEn parameter in the SetStp function. This vulnerability allows attackers to execute arbitrary commands with root privileges. |
CVE-2023-5964 | CRITICAL | 9.9 | 0.00828 | 39.89 | No | No | 2023-11-06 | 2025-06-12 | euvd | The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not proper…The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients.
To remediate this issue DELETE the instruction “Show dialogue with caption %Caption% and message %Message%” from the list of instructions in the Settings UI, and replace it with the new instruction 1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as “Show %Type% type notification with header %Header% and message %Message%” with a version of 7.1 or above. |
CVE-2020-28440 | CRITICAL | 9.8 | 0.01963 | 39.89 | No | No | 2020-12-11 | 2024-09-16 | euvd | All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function. |
CVE-2020-2915 | CRITICAL | 9.8 | 0.01961 | 39.89 | No | No | 2020-04-15 | 2024-09-27 | euvd | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions t…Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). |
CVE-2025-32461 | CRITICAL | 9.9 | 0.00837 | 39.89 | No | No | 2025-04-09 | 2025-11-03 | euvd | wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are …wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3. |
CVE-2024-46479 | CRITICAL | 9.9 | 0.00818 | 39.89 | No | No | 2025-01-13 | 2025-01-13 | euvd | Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a…Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution. |
CVE-2021-22855 | CRITICAL | 9.8 | 0.01969 | 39.89 | No | No | 2021-02-17 | 2024-09-16 | euvd | The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serializ…The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands. |
CVE-2023-21709 | CRITICAL | 9.8 | 0.01983 | 39.89 | No | No | 2023-08-08 | 2026-08-10 | euvd, nvd | Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2020-7781 | CRITICAL | 9.8 | 0.01966 | 39.89 | No | No | 2020-12-16 | 2024-09-16 | euvd | This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrat…This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrates the vulnerability: |
CVE-2023-40505 | CRITICAL | 9.8 | 0.0196 | 39.89 | No | No | 2024-05-03 | 2024-09-18 | euvd | LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the createThumbnailByMovie method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
. Was ZDI-CAN-19978. |
CVE-2020-29511 | CRITICAL | 9.8 | 0.01942 | 39.88 | No | No | 2020-12-14 | 2024-09-17 | euvd | The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization ro…The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. |
CVE-2025-22949 | CRITICAL | 9.8 | 0.01929 | 39.88 | No | No | 2025-01-10 | 2025-01-14 | euvd | Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code exec…Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution. |
CVE-2024-0455 | CRITICAL | 9.9 | 0.00813 | 39.88 | No | No | 2024-02-25 | 2024-08-12 | euvd | The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single…The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin, and when in single user) could put in the URL
```
http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance
```
which is a special IP and URL that resolves only when the request comes from within an EC2 instance. This would allow the user to see the connection/secret credentials for their specific instance and be able to manage it regardless of who deployed it.
The user would have to have pre-existing knowledge of the hosting infra which the target instance is deployed on, but if sent - would resolve if on EC2 and the proper `iptable` or firewall rule is not configured for their setup. |
CVE-2023-38647 | CRITICAL | 9.8 | 0.01953 | 39.88 | No | No | 2023-07-26 | 2024-10-02 | euvd | An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax…An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. This unbounded deserialization can likely lead to remote code execution. The code can be run in Helix REST start and Workflow creation.
Affect all the versions lower and include 1.2.0.
Affected products: helix-core, helix-rest
Mitigation: Short term, stop using any YAML based configuration and workflow creation.
Long term, all Helix version bumping up to 1.3.0 |
CVE-2024-24321 | CRITICAL | 9.8 | 0.01937 | 39.88 | No | No | 2024-02-08 | 2026-07-09 | euvd | An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_4…An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function. |
CVE-2025-58371 | CRITICAL | 9.9 | 0.00804 | 39.88 | No | No | 2025-09-05 | 2025-09-08 | euvd | Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanit…Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input and achieve Remote Code Execution (RCE) on the Actions runner. The workflow runs with broad permissions and access to repository secrets. It is possible for an attacker to execute arbitrary commands on the runner, push or modify code in the repository, access secrets, and create malicious releases or packages, resulting in a complete compromise of the repository and its associated services. This is fixed in version 3.26.7. |
CVE-2025-0364 | CRITICAL | 9.8 | 0.0193 | 39.88 | No | No | 2025-02-04 | 2026-05-14 | euvd | BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registratio…BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the attacker can upload and execute arbitrary PHP code using the "Cloud Storage Addin," leading to unauthenticated code execution. |
CVE-2023-24139 | CRITICAL | 9.8 | 0.01946 | 39.88 | No | No | 2023-02-03 | 2025-03-26 | euvd | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag…TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function. |
CVE-2021-23376 | CRITICAL | 9.8 | 0.01943 | 39.88 | No | No | 2021-04-18 | 2024-09-17 | euvd | This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for a…This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. |
CVE-2024-8614 | CRITICAL | 9.9 | 0.00793 | 39.88 | No | No | 2024-11-06 | 2026-04-08 | euvd | The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch…The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and including, 2.6.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. |
CVE-2020-6152 | CRITICAL | 9.8 | 0.01943 | 39.88 | No | No | 2020-09-01 | 2024-08-04 | euvd | A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malfo…A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file. |
CVE-2020-16096 | CRITICAL | 9.9 | 0.008 | 39.88 | No | No | 2020-09-15 | 2024-08-04 | euvd | In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to …In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to 7.80.960(MR2), 7.70 and earlier, any operator account has access to all data that would be replicated if the system were to be (or is) attached to a multi-server environment. This can include plain text credentials for DVR systems and card details used for physical access/alarm/perimeter components. |
CVE-2023-24141 | CRITICAL | 9.8 | 0.01946 | 39.88 | No | No | 2023-02-03 | 2025-03-26 | cnvd, euvd | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetw…TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function. |
CVE-2022-41267 | CRITICAL | 9.9 | 0.00791 | 39.88 | No | No | 2022-12-13 | 2025-04-22 | euvd | SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Busin…SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating system level, enabling the attacker to take full control of the system causing a high impact on confidentiality, integrity, and availability of the application. |
CVE-2023-24142 | CRITICAL | 9.8 | 0.01946 | 39.88 | No | No | 2023-02-03 | 2025-03-26 | euvd | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetwork…TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function. |