Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mi vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2018-14060
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D prior to 2.26.4 devices allows an malicious user to execute any command via crafted JSON data.
Mi Xiaomi R3d Firmware
1 Github repository
8.8
CVSSv3
CVE-2022-31277
Xiaomi Lamp 1 v2.0.4_0066 exists to be vulnerable to replay attacks. This allows malicious users to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request.
Mi Xiaomi Lamp 1 Firmware 2.0.4 0066
8.8
CVSSv3
CVE-2020-14120
Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum when using a three-party application to pass in parameters, and attackers can induce users to install a malicious app and use the vulnerability to achieve elevate...
Mi Miui 12.5
8.8
CVSSv3
CVE-2019-13322
This vulnerability allows remote malicious users to execute arbitrary code on vulnerable installations of Xiaomi Browser before 10.4.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...
Mi Mi Browser
8.8
CVSSv3
CVE-2019-6743
This vulnerability allows remote malicious users to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser before 10.4.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The spec...
Mi Mi6 Browser
8.8
CVSSv3
CVE-2018-16130
System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows malicious users to execute arbitrary system commands via the "payload" URL parameter.
Mi Miwifi Os 2.22.15
8.8
CVSSv3
CVE-2018-13023
System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows malicious users to execute system commands via the "timeout" URL parameter.
Mi Miwifi Os 2.22.15
8.1
CVSSv3
CVE-2023-26320
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
Mi Xiaomi Router Ax3200 Firmware
8.1
CVSSv3
CVE-2023-1502
A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastname with the input a&...
Alphaware - Simple E-commerce System Project Alphaware - Simple E-commerce System 1.0
8.1
CVSSv3
CVE-2020-14104
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.
Mi Ax3600 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
firmware
CVE-2023-52866
CVE-2024-4367
CVE-2024-1721
CVE-2023-34992
XML injection
CVE-2023-52817
SQL
CVE-2023-52855
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »