CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

901 matches found

Positive Technologies•added 2020/07/13 12:00 a.m.•7 views

PT-2020-4297

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description Remote attackers can execute arbitrary system commands due to insufficient neutralization of special elements passed in the URI. This issue occurs at the 'goform/setUsbUnload' endpoint via the...

10CVSS9.4AI score0.7981EPSS

SaveExploits2References14

Positive Technologies•added 2020/07/13 12:00 a.m.•6 views

PT-2020-12472

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description A hard-coded telnet credential in the tenda login binary allows unauthenticated remote attackers to start a telnetd service on the device. Recommendations For Tenda AC15 AC1900 version...

10CVSS0.0285EPSS

SaveExploits1References5

Positive Technologies•added 2020/07/13 12:00 a.m.•4 views

PT-2020-12473

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description The issue is related to an XSS problem that allows remote attackers to execute malicious payloads. This is achieved via the WifiName POST parameter in the "/goform/WifiBasicSet" endpoint...

6.1CVSS0.00856EPSS

SaveExploits1References5

Positive Technologies•added 2020/07/13 12:00 a.m.•4 views

PT-2020-12471

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description A CSRF issue allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page, specifically targeting the "goform/SysToolReboot"...

7.1CVSS0.00581EPSS

SaveExploits1References5

Rapid7 Vulnerability Database (full)•added 2020/07/13 12:00 a.m.•6 views

CVE-2020-10987: Improper Neutralization of Special Elements used in an OS Command

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter...

10CVSS8.7AI score0.7981EPSS

SaveExploits2References2

Rapid7 Vulnerability Database (full)•added 2020/07/13 12:00 a.m.•7 views

CVE-2020-10989: Improper Neutralization of Input During Web Page Generation

An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter...

6.1CVSS6.2AI score0.00856EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/07/13 12:00 a.m.•9 views

CVE-2020-10988: Use of Hard-coded Credentials

A hard-coded telnet credential in the tendalogin binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device...

10CVSS5.9AI score0.0285EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/07/13 12:00 a.m.•9 views

CVE-2020-10986: Cross-Site Request Forgery (CSRF)

A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacker-controlled web page...

7.1CVSS6AI score0.00581EPSS

SaveExploits1References2

attackerkb•added 2020/07/13 12:00 a.m.•41 views

CVE-2020-10987

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

10CVSS9.5AI score0.7981EPSS

SaveIn wildExploits2References4

Rapid7 Vulnerability Database (full)•added 2020/05/22 12:00 a.m.•8 views

CVE-2020-13392: Buffer Copy without Checking Size of Input

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS8.9AI score0.02552EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/05/22 12:00 a.m.•8 views

CVE-2020-13393: Buffer Copy without Checking Size of Input

9.8CVSS8.9AI score0.03283EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/05/22 12:00 a.m.•5 views

CVE-2020-13394: Buffer Copy without Checking Size of Input

9.8CVSS8.9AI score0.02552EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/05/22 12:00 a.m.•6 views

CVE-2020-13389: Buffer Copy without Checking Size of Input

9.8CVSS8.9AI score0.02552EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/05/22 12:00 a.m.•8 views

CVE-2020-13390: Buffer Copy without Checking Size of Input

9.8CVSS8.9AI score0.02552EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/05/22 12:00 a.m.•5 views

CVE-2020-13391: Buffer Copy without Checking Size of Input

9.8CVSS8.9AI score0.02552EPSS

SaveExploits1References2

Positive Technologies•added 2020/05/22 12:00 a.m.•2 views

PT-2020-13514

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 1.0 V15.03.05.19 multi TD01 Tenda AC9 version 1.0 V15.03.05.196318 CN Tenda AC9 version 3.0 V15.03.06.42 multi Tenda AC15 version 1.0 V15.03.05.19 multi TD01 Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow...

9.8CVSS0.02552EPSS

SaveExploits1References5

Positive Technologies•added 2020/05/22 12:00 a.m.•8 views

PT-2020-13515

9.8CVSS0.02552EPSS

SaveExploits1References5

Positive Technologies•added 2020/05/22 12:00 a.m.•3 views

PT-2020-13512

9.8CVSS0.02552EPSS

SaveExploits1References5

Positive Technologies•added 2020/05/22 12:00 a.m.•3 views

PT-2020-13513

9.8CVSS0.02552EPSS

SaveExploits1References5

Positive Technologies•added 2020/05/22 12:00 a.m.•3 views

PT-2020-13517

9.8CVSS0.02552EPSS

SaveExploits1References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by