TI-2024-30414 CVE-2024-45348 · GHSA-jpc2-3rcq-mchp
Command injection in Xiaomi Router AX9000
Priority MEDIUM 42
Xiaomi Router AX9000 has a post-authorization command injection vulnerability.
Vulnerabilities
101 records
TI-2023-11475 CVE-2023-26322 · GHSA-fp9x-9r68-jr5q
GetApps application has code execution vulnerability
Priority MEDIUM 44
A code execution vulnerability exists in the XiaomiGetApps application product.
TI-2023-11476 CVE-2023-26323 · GHSA-3mjr-8v4p-9qf4
Xiaomi App Market has a code execution vulnerability
Priority MEDIUM 43
A code execution vulnerability exists in the Xiaomi App market product.
TI-2023-11474 CVE-2023-26321 · GHSA-gmjg-rc78-3h37
The international version of Xiaomi File Manager has a path traversal vulnerability
Priority MEDIUM 44
A path traversal vulnerability exists in the Xiaomi File Manager application product(international version).
TI-2023-11477 CVE-2023-26324 · GHSA-xmm6-6gqm-6vjq
GetApps application has code execution vulnerability
Priority MEDIUM 44
A code execution vulnerability exists in the XiaomiGetApps application product.
TI-2023-11468 CVE-2023-26315 · GHSA-78wv-wpmf-ghfp
Xiaomi router has a command injection vulnerability after authorization
Priority MEDIUM 56
The Xiaomi router AX9000 has a post-authentication command injection vulnerability.
TI-2024-25113 CVE-2024-37664 · GHSA-hc77-8v8p-w9rp
Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks.
Priority MEDIUM 57
Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks.
TI-2024-25112 CVE-2024-37663 · GHSA-v2j3-f5j8-8jrp
Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks.
Priority MEDIUM 52
Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks.
TI-2024-04103 CVE-2024-4406 · GHSA-gvj9-724p-cxwf
Cross-site scripting in Xiaomi Pro 13
Priority MEDIUM 47
Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability.
TI-2024-04102 CVE-2024-4405 · GHSA-5cf2-gv4g-4g88
Cross-site scripting in Xiaomi Pro 13
Priority MEDIUM 45
Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability.
TI-2023-11473 CVE-2023-26320 · GHSA-wjgc-gw8v-m4vg
Xiaomi Router external request interface vulnerability leads to stack overflow
Priority MEDIUM 40
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
TI-2023-11472 CVE-2023-26319 · GHSA-4j9w-xhrc-q5vq
Xiaomi Router administration interface vulnerability leads command injection and stack overflow
Priority LOW 36
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
TI-2023-11471 CVE-2023-26318 · GHSA-qm2m-hfw4-jq7f
Xiaomi router web interface post-authorization stack overflow
Priority LOW 34
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.
TI-2023-11470 CVE-2023-26317 · GHSA-x3cm-94m2-6vw4
Xiaomi router external request interface has command injection
Priority MEDIUM 44
Xiaomi routers have an external interface that can lead to command injection.
TI-2023-11469 CVE-2023-26316 · GHSA-68qx-rgww-4mx9
Cross-site scripting in Xiaomi cloud service Application
Priority LOW 27
A XSS vulnerability exists in the Xiaomi cloud service Application product.
TI-2020-11071 CVE-2020-14140 · GHSA-7h5h-fqwm-4g32
Missing authentication in Xiaomi Multiple Devices
Priority MEDIUM 41
When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability.
TI-2020-11070 CVE-2020-14131 · GHSA-wvmm-9g2m-qqr7
The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same…
Priority MEDIUM 44
The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center (MiSRC)…
TI-2020-11068 CVE-2020-14129 · GHSA-c735-hf6c-2x9j
A logic vulnerability exists in a Xiaomi product.
Priority MEDIUM 44
A logic vulnerability exists in a Xiaomi product.
TI-2020-11054 CVE-2020-14114 · GHSA-3v8q-2q37-v64x
information leakage vulnerability exists in the Xiaomi SmartHome APP.
Priority LOW 34
information leakage vulnerability exists in the Xiaomi SmartHome APP.
TI-2020-11066 CVE-2020-14126 · GHSA-g6xq-m49w-3jq9
Information leakage vulnerability exists in the Mi Sound APP.
Priority LOW 34
Information leakage vulnerability exists in the Mi Sound APP.
TI-2020-11067 CVE-2020-14127 · GHSA-vx8g-5qq9-m5gj
Out-of-bounds write in Redmi K40 ,Redmi Note10 Pro
Priority LOW 35
A denial of service vulnerability exists in some Xiaomi models of phones.
TI-2022-13304 CVE-2022-31277 · GHSA-4q3q-2r9w-w4p5
Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks.
Priority LOW 39
Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks.
TI-2020-11065 CVE-2020-14125 · GHSA-98mg-wxrj-pfcv
Out-of-bounds read in Redmi Note 11 ,Redmi Note 9T
Priority MEDIUM 43
A denial of service vulnerability exists in some Xiaomi models of phones.
TI-2020-11063 CVE-2020-14123 · GHSA-j77r-52jv-wg32
Double free in MIUI
Priority LOW 35
There is a pointer double free vulnerability in Some MIUI Services.
TI-2020-11057 CVE-2020-14117 · GHSA-vh3x-qhh3-9frg
A improper permission configuration vulnerability in Xiaomi Content Center APP.
Priority LOW 25
A improper permission configuration vulnerability in Xiaomi Content Center APP.