Lucene search
+L

127 matches found

NVD
NVD
•added 2024/04/17 4:15 p.m.•24 views

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

7.5CVSS6.6AI score0.00807EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/17 4:15 p.m.•15 views

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

7.5CVSS6AI score0.00807EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/17 12:00 a.m.•30 views

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

6.8AI score0.00807EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/17 12:00 a.m.•15 views

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

6.9AI score0.00807EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•20 views

Tenda AC500 安全漏洞

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, supporting cross-VLAN management of wireless networks. A buffer overflow vulnerability exists in the Tenda AC500, which originates from the port parameter of the fromSetVlanInfo method of the...

7.5CVSS7.3AI score0.00807EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•4 views

CVE-2023-46060: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

7.5CVSS6AI score0.00807EPSS
SaveExploits1References2
CNVD
CNVD
•added 2024/02/02 12:00 a.m.•15 views

TOTOLINK A3300R setRemoteCfg Method Command Injection Vulnerability

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the port and enable parameters of the setRemoteCfg method faili...

9.8CVSS7.9AI score0.01517EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/30 3:15 p.m.•14 views

CVE-2024-24330

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the setRemoteCfg function...

9.8CVSS5.8AI score0.01517EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/10 4:15 p.m.•21 views

CVE-2023-51967

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo...

9.8CVSS5.8AI score0.00729EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/10 3:15 p.m.•14 views

CVE-2023-51964

Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo...

9.8CVSS5.8AI score0.00701EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•27 views

PT-2024-14352 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.port parameter in the getIptvInfo function. This allows for potential exploitation. Recommendations: For Tenda AX1803 version...

9.8CVSS9.3AI score0.00729EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•26 views

PT-2024-14349 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow that can occur via the iptv.stb.port parameter in the setIptvInfo function. Recommendations: For Tenda AX1803 version 1.0.0.1, avoid using the iptv.stb.port...

9.8CVSS9.3AI score0.00701EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•22 views

PT-2024-14343 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is a stack overflow that occurs via the iptv.stb.port parameter in the formGetIptv function. Recommendations: For Tenda AX1803 version 1.0.0.1, as a temporary workaround, consider restrictin...

9.8CVSS7.7AI score0.00701EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/14 12:00 a.m.•9 views

CVE-2023-25642: Buffer Copy without Checking Size of Input

There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack...

6.5CVSS6.9AI score0.00512EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/10/03 9:15 p.m.•12 views

CVE-2023-33268

An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection blind...

9.8CVSS7.3AI score0.01452EPSS
SaveExploits2References2
OSV
OSV
•added 2023/10/03 9:15 p.m.•21 views

CVE-2023-33268

An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection blind...

9.8CVSS5.8AI score0.01452EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/10/03 12:00 a.m.•20 views

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the port parameter in the SSL certificate checking function being susceptible to operating system...

9.8CVSS7.4AI score0.01452EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/10/03 12:00 a.m.•24 views

PT-2023-24252 · Unknown · Dts Monitoring

Name of the Vulnerable Software and Affected Versions: DTS Monitoring version 3.57.0 Description: An issue was discovered in the SSL Certificate check function where the port parameter is vulnerable to OS command injection, specifically blind command injection. Recommendations: For DTS Monitoring...

9.8CVSS9.8AI score0.01452EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/03 12:00 a.m.•5 views

CVE-2023-33268: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection blind...

9.8CVSS8.2AI score0.01452EPSS
SaveExploits2References2
Prion
Prion
•added 2023/09/22 11:15 p.m.•29 views

Command injection

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTEPORT parameters...

7.5CVSS9.7AI score0.0281EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder