Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-472 (对假设不可变Web参数的外部可控制) — Vulnerability Class 70

70 vulnerabilities classified as CWE-472 (对假设不可变Web参数的外部可控制). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2021-1291 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities — Cisco Small Business RV Series Router Firmware 9.8 Critical2021-02-04
CVE-2021-1292 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities — Cisco Small Business RV Series Router Firmware 9.8 Critical2021-02-04
CVE-2021-1293 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities — Cisco Small Business RV Series Router Firmware 9.8 Critical2021-02-04
CVE-2021-1294 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities — Cisco Small Business RV Series Router Firmware 9.8 Critical2021-02-04
CVE-2021-1295 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities — Cisco Small Business RV Series Router Firmware 9.8 Critical2021-02-04
CVE-2021-1289 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities — Cisco Small Business RV Series Router Firmware 9.8 Critical2021-02-04
CVE-2020-1765 Spoofing of From field in several screens — ((OTRS)) Community Edition 3.5 Low2020-01-10
CVE-2019-13927 Siemens Desigo PX 安全漏洞 — Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 8.2 -2019-12-12
CVE-2017-5260 Cambium Networks cnPilot 安全漏洞 — cnPilot 8.8 -2017-12-20
CVE-2017-5261 Cambium Networks cnPilot Web administrative console 路径遍历漏洞 — cnPilot 8.1 -2017-12-20

Vulnerabilities classified as CWE-472 (对假设不可变Web参数的外部可控制) represent 70 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.