Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
An HTTP proxy can trick libcurl into sending the origin's credentials (Basic
password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering
the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the
expected 407 `Proxy-Authenticate:`.
Opis źródłowy NVD · ENOcena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,04 % · rekomendacja wg zapisanej polityki
An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,04 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,04 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with default options. Continuation lines are pulled lazily with str += lineContent in src/rules_block/reference.ts, and…
Opis źródłowy NVD · ENCVSS 7,5 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped middleware's mount path to the plugin scope prefix in a way that could diverge from the path Fastify's router serves, most often when the scope prefix…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,15 % · rekomendacja wg zapisanej polityki
A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 1,15 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
CVSS
9,1
EPSS
0,95 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,79 % · rekomendacja wg zapisanej polityki
An HTTP proxy can trick libcurl into sending the origin's credentials (Basic
password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering
the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the
expected 407 `Proxy-Authenticate:`.
Opis źródłowy NVD · EN
Do weryfikacji
Ocena niepełna · brak pełnych danych nie oznacza niskiego ryzyka
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,04 % · rekomendacja wg zapisanej polityki
An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,04 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,04 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with default options. Continuation lines are pulled lazily with str += lineContent in src/rules_block/reference.ts, and…
Opis źródłowy NVD · EN
Obserwuj
CVSS 7,5 · EPSS 0,46 % · rekomendacja wg zapisanej polityki
Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,35 % · rekomendacja wg zapisanej polityki
@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped middleware's mount path to the plugin scope prefix in a way that could diverge from the path Fastify's router serves, most often when the scope prefix…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,31 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,15 % · rekomendacja wg zapisanej polityki
A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 1,15 % · rekomendacja wg zapisanej polityki
A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,95 % · rekomendacja wg zapisanej polityki
9,1
0,95 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOpóźnione lub nieustalone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData modelu znajduje się przy rekordzie.