[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424268
> CVE-2024-39789 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.10%]
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39788 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.56%]
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39787 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.59%]
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A directory traversal vu...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39786 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.59%]
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A directory traversal vu...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39785 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 6.37%]
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command inject...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39784 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 6.37%]
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command inject...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39783 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 4.60%]
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command i...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39782 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 3.82%]
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command i...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39781 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 4.60%]
Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command i...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39774 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.35%]
A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39773 [MEDIUM 5.3]
[PUBLISHED: 2025-01-14] [EPSS 0.81%]
An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39770 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.29%]
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerab...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39769 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 0.90%]
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerab...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39768 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.29%]
Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This vulnerab...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39765 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 5.36%]
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities....
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39764 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 4.28%]
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities....
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39763 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 4.95%]
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities....
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39762 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 6.04%]
Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities....
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39761 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [EPSS 8.40%]
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comma...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39760 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 17.8%]
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comma...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39759 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [EPSS 8.40%]
Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A comma...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39757 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.47%]
A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39756 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.93%]
A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39754 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [EPSS 1.34%]
A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39608 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [EPSS 1.46%]
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39604 [CRITICAL 9.0]
[PUBLISHED: 2025-01-14] [EPSS 1.99%]
A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39603 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.47%]
A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39602 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.38%]
An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39370 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.24%]
An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39367 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 8.48%]
An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39363 [CRITICAL 9.6]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 49.0%]
A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulne...
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39360 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 12.0%]
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39359 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.47%]
A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39358 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.93%]
A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39357 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.47%]
A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39299 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.58%]
A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39294 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.58%]
A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39288 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 13.8%]
A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39280 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 35.0%]
An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-39273 [CRITICAL 9.0]
[PUBLISHED: 2025-01-14] [EPSS 1.12%]
A firmware update vulnerability exists in the fw_check.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-38666 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 19.4%]
An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-37357 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 9.96%]
A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-37186 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 23.4%]
An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-37184 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.35%]
A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-36493 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 2.08%]
A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-36295 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 21.3%]
A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-36290 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [EPSS 1.45%]
A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-36272 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 1.35%]
A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-36258 [CRITICAL 10.0]
[PUBLISHED: 2025-01-14] [âš¡ EPSS 12.8%]
A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware
> CVE-2024-34544 [CRITICAL 9.1]
[PUBLISHED: 2025-01-14] [EPSS 8.73%]
A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
AFFECTED_PRODUCTS: Wavlink Wl Wn533a8 Firmware