Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router. A buffer overflow vulnerability exists in Tenda AC6 v15.03.05.09multi, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9: Operating System Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the vlanid parameter in the SetIPTVCfg function to properly filter the special elements of the construction snippet, which can be exploited to...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetStaticRoutecfg function that does not properly validate data boundaries when performing operations on memory, and can be...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the firewallCfg parameter in the SetFirewallCfg function that does not properly validate data boundaries when performing operations on memory, and can b...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 buffer error vulnerability

The Tenda AC9 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC9 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

PT-2022-17635 · Unknown · Pfsense Ce +1

Name of the Vulnerable Software and Affected Versions: pfSense CE versions prior to 2.6.0 pfSense Plus versions prior to 22.01 Description: The issue is related to improper access control in pfSense CE and pfSense Plus, allowing a remote attacker with the privilege to change NTP GPS settings to...

Tenda AC6 buffer error vulnerability

Tenda AC6 is a wireless router from Tenda, China. Tenda AC6 is vulnerable to a buffer overflow vulnerability, which stems from the deviceId parameter in the saveParentControlInfo function that does not properly validate data boundaries when performing operations on memory, and can be exploited by...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetVirtualServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which originates when the list parameter in the SetIpMacBind function does not properly validate data boundaries when performing operations on memory, and can be exploit...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to potentially cause arbitrary command execution...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetSysTimeCfg function, which can be exploited by an attacker to cause arbitrary command execution...

CVE-2022-24770

"gradio" is an open source framework for building interactive machine learning models and demos. Prior to version 2.8.11, "gradio" suffers from Improper Neutralization of Formula Elements in a CSV File. The "gradio" library has a flagging functionality which saves input/output data into a CSV fil...

CVE-2022-24770

The CVE-2022-24770 issue affects the Gradio library prior to version 2.8.11, in the flagging CSV export feature. The root cause is Improper Neutralization of Formula Elements in a CSV File, allowing arbitrary text (e.g., commands) to be saved into CSV outputs that may be opened by spreadsheet pro...

CVE-2021-23556

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

CVE-2021-23556

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

DEBIAN-CVE-2021-23556

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

CVE-2021-23556

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...