Tenda AC18 formSetQosBand Stack Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC18 version V15.03.05.19, which originates from the formSetQosBand function not performing a size check on input data, and can be exploited by an attacker to cause remote code execution or...

Tenda W20E formSetDebugCfg Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E version V15.11.0.6, which stems from the formSetDebugCfg method not size-checking the input data with a request to /goform/setDebugCfg/, which can be exploited by an attacker to cause a...

Tenda AC15 formSetQosBand Stack Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC15 router version V15.03.05.19, which originates from the formSetQosBand method not size-checking the input data with request/goform/SetNetControlList, and can be exploited by an...

Tenda AC15 and AC18 setSchedWifi Heap Overflow Vulnerability

Tenda AC15 and Tenda AC18 are both products of Tenda, a Chinese company.Tenda AC15 is a wireless router.Tenda AC18 is a router. A heap overflow vulnerability exists in Tenda AC15 and AC18Version 15.03.05.19, which stems from the setSchedWifi method not performing a size check on incoming data whe...

ZZCMS index php information leakage vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...

Tenda W20E formSetPortMapping Stack Overflow Vulnerability

The Tenda W20E is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda W20E router version V15.11.0.6, which originates from the formSetPortMapping method not size-checking the input data when goform/setPortMapping/ with a POST request, and can be exploited to...

china-intime.com Cross Site Scripting vulnerability OBB-2943457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OTFCC 缓冲区错误漏洞

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC is vulnerable to a buffer overflow vulnerability that originates from a heap buffer overflow contained via /release-x64/otfccdump 0x6e7e3d. No detailed vulnerability details are...

Huawei CV81-WDM FW Input Validation Vulnerability

The Huawei CV81-WDM FW is a laser multifunction printer from Huawei China. A security vulnerability exists in Huawei CV81-WDM FW version 01.70.49.29.46, which can be exploited by attackers to cause a DoS attack...

Huawei EMUI and Magic UI buffer overflow vulnerability

Huawei EMUI/Magic UI is an Android-based mobile operating system developed by Huawei China.Huawei EMUI/Magic UI is vulnerable to a buffer overflow vulnerability that originates from a boundary error in the video framework when handling untrusted input. A remote attacker could exploit the...

Shenzhen Lanning Software Co., Ltd. has SQL injection vulnerability in Lanning Intelligent Collaboration Platform

Shenzhen Lailing Software Co., Ltd. is a well-known large platform OA service provider and a leading knowledge management solution provider in China. It is a national high-tech enterprise specializing in knowledge-based consulting, software development, implementation and technical services for...

Brocade Fabric OS 安全漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

Tenhot TWS-100 安全漏洞

The Tenhot TWS-100 is a gateway router that combines gateway functionality with AC management functionality from China-based Tenhot. A security vulnerability exists in the Tenhot TWS-100 V4.0-201809201424 router that stems from the presence of a remote code execution RCE vulnerability...

China Accuses NSA's TAO Unit of Hacking its Military Research University

China has accused the U.S. National Security Agency NSA of conducting a string of cyberattacks aimed at aeronautical and military research-oriented Northwestern Polytechnical University in the city of Xi'an in June 2022. The National Computer Virus Emergency Response Centre NCVERC disclosed its...

CVE-2022-36877

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...

Information disclosure

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log...

aEnrich eHRD Learning Management Key Performance Indicator System 5.x 安全漏洞

aEnrich eHRD Learning Management Key Performance Indicator System 5+ is a web-based Learning Management System LMS from aEnrich Corporation in China. A security vulnerability exists in the aEnrich eHRD Learning Management Key Performance Indicator System version 5.x, which originates from exposin...

aEnrich a+HRD 路径遍历漏洞

aEnrich a+HRD is a full-service human resources development solution from Acer aEnrich China. A path traversal vulnerability exists in aEnrich a+HRD Learning Management Key Performance Indicator System version 5.x. The vulnerability stems from a lack of input validation, and a Local File Inclusio...