CVE-2023-37716

Tenda F1202 V1.0BRV1.2.0.20408 and FH1202V1.2.0.19EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting...

CVE-2023-37723

Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting...

CVE-2023-37721

Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter...

CVE-2023-24202

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

CVE-2023-2272

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-24195

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in index.php...

CVE-2023-2152

A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched...

CVE-2023-1805

The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-46542

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat...

CVE-2022-45520

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/qossetting...

CVE-2022-45513

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/P2pListFilter...

CVE-2022-45517

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer...

CVE-2022-45516

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting...

CVE-2022-43015

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the entriesPerPage parameter...

CVE-2022-1532

Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-37803

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat...

CVE-2022-45514

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter...

CVE-2022-45518

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind...

CVE-2022-45523

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/L7Im...

CVE-2020-8887

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...