Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-15 (系统设置或配置在外部可控制) — Vulnerability Class 53

53 vulnerabilities classified as CWE-15 (系统设置或配置在外部可控制). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-39280 WAVLINK AC3000 安全漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39788 WAVLINK AC3000 安全漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39789 WAVLINK AC3000 安全漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-39790 WAVLINK AC3000 安全漏洞 — Wavlink AC3000 9.1 Critical2025-01-14
CVE-2024-54097 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 7.3 High2024-12-12
CVE-2024-51544 Service Control — ASPECT-Enterprise 8.2 High2024-12-05
CVE-2024-51543 Information Disclosure — ASPECT-Enterprise 8.2 High2024-12-05
CVE-2024-50358 Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G 7.2 High2024-11-26
CVE-2024-10979 PostgreSQL PL/Perl environment variable changes execute arbitrary code — PostgreSQL 8.8 High2024-11-14
CVE-2024-21583 Gitpod 安全漏洞 — github.com/gitpod-io/gitpod/components/server/go/pkg/lib 4.1 Medium2024-07-19
CVE-2024-4326 Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui — parisneo/lollms-webui 9.8AICriticalAI2024-05-16
CVE-2023-6154 Local privilege escalation in Bitdefender Total Security (VA-11168) — Total Security 7.8 High2024-04-01
CVE-2024-23639 micronaut-core management endpoints vulnerable to drive-by localhost attack — micronaut-core 5.1 Medium2024-02-09
CVE-2023-50252 php-svg-lib unsafe attributes merge when parsing `use` tag — php-svg-lib 8.3 High2023-12-12
CVE-2023-46248 Overwrite of builtin Cody commands facilitates RCE — cody 9.1 Critical2023-10-31
CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2 — instantsoft/icms2 9.4 -2023-09-01
CVE-2023-3321 Code Execution through Writable Mosquitto Configuration File — ABB Ability™ zenon 7.0 High2023-07-24
CVE-2023-32349 Teltonika RUT router 安全漏洞 — RUT model routers 8.0 High2023-05-22
CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory — in-toto 5.5 Medium2023-05-10
CVE-2021-27406 PerFact OpenVPN-Client — OpenVPN-Client 8.8 High2022-10-14
CVE-2021-38453 AUVESY Versiondog — Versiondog 9.1 Critical2021-10-22
CVE-2021-31338 SINEMA Remote Connect Server 安全漏洞 — SINEMA Remote Connect Client 7.8 -2021-08-19
CVE-2021-3707 D-Link DSL-2750U安全漏洞 — DSL-2750U 7.1 -2021-08-16

Vulnerabilities classified as CWE-15 (系统设置或配置在外部可控制) represent 53 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.