3434 matches found
CVE-2022-28082
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList...
CVE-2022-28082
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList...
PT-2022-19077 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.20 Description: The issue is related to a buffer overflow in the web interface, specifically in the "/goform/setpptpservercfg" API endpoint. The vulnerability arises from the handling of POST data, where the starti...
CVE-2022-28082: Out-of-bounds Write
Tenda AX12 v22.03.01.21CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList...
Tenda AX12 缓冲区错误漏洞
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China. A security vulnerability exists in Tenda AX12 version 22.03.01.21CN, which originates from a stack overflow condition found via the list parameter of /goform/SetNetControlList...
CVE-2022-28557: Improper Neutralization of Special Elements used in an OS Command
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin device web, which can also cooperate with CVE-2021-44971 to cause unconditional arbitrary command execution...
CVE-2022-28556: Out-of-bounds Write
Tenda AC15 USAC15V1.0BRV15.03.05.20multiTDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow...
CVE-2022-28560
There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...
CVE-2022-28560
There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...
CVE-2022-28561
The CVE-2022-28561 entry concerns the Tenda AX12 router (22.03.01.21_cn). A stack/buffer overflow is triggered in the httpd service via the /goform/setMacFilterCfg function when handling crafted input, allowing an attacker to obtain a stable shell. Public references in the document set describe a...
The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway, which exists due to insufficient validation of input data, allows a perpetrator to execute arbitrary code or escalate their privileges.
The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges or execute arbitrary code...
CVE-2022-27375: Cross-Site Request Forgery (CSRF)
Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub422168 at /goform/WifiExtraSet...
CVE-2022-28364
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/rlmswitchrprocess file parameter via GET. Authentication is required...
Reprise Software Reprise License Manager 跨站脚本漏洞
Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A cross-site scripting vulnerabilit...
CVE-2022-28364: Improper Neutralization of Input During Web Page Generation
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/rlmswitchrprocess file parameter via GET. Authentication is required...
Reprise Software Reprise License Manager 跨站脚本漏洞
Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A security vulnerability exists in...
CVE-2022-28363: Improper Neutralization of Input During Web Page Generation
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability XSS in the /goform/loginprocess username parameter via GET. No authentication is required...
Tenda M3 Command Injection Vulnerability (CNVD-2022-33113)
Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /goform/WriteFacMac to properly filter the construct command special characters, commands, etc. An attacker could use this vulnerability to cause...