CVE-2025-15356 Tenda AC20 PowerSaveSet sscanf buffer overflow

A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit...

CVE-2025-15356

creationtimestamp| type| source ---|---|--- 2025-12-30 09:05:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115807715958132328 2025-12-30 21:38:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbacqmp6nf2u...

CVE-2019-15356

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15356

creationtimestamp| type| source ---|---|--- 2024-02-14 15:27:27+00:00| seen| https://t.me/ctinow/184725...

allaricerca.it Cross Site Scripting vulnerability OBB-1255724

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-15356

CVE-2020-15356 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.

CVE-2019-15356

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15356

The Lava Flair Z1 Android device with a build fingerprint of LAVA/Z1/Z1:8.1.0/O11019/1536680131:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2018-15356

CVE-2018-15356 affects Eltex ESP-200 firmware 1.2.0, where an authenticated attacker can execute arbitrary code via command ejection. The vulnerability is documented across multiple feeds (NVD, CNVD, CVE listing, PRION/PT-2018-12990) with an impact of remote code execution authenticated by creden...

CVE-2017-15356

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-15356

The CVE-2017-15356 issue affects Huawei DP300, RP200, TE/TX series (e.g., DP300, V500R002C00, V600R006C00, TE30/40/50/60, TX50, and related revs such as V100R001C10); it is a buffer overflow caused by insufficient input validation of three HTTP message parameters. Attackers sending specially craf...

CVE-2017-15356

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

Security Advisory - Three Buffer Overflow Vulnerabilities in Some Huawei Products

There are three buffer overflow vulnerabilities in some Huawei products. An attacker may send specially crafted HTTP messages to the affected products. Due insufficient input validation of three different parameters in the messages, successful exploit may cause some service abnormal. Vulnerabilit...