Lucene search
+L

898 matches found

Cvelist
Cvelist
•added 2023/09/12 7:36 a.m.•43 views

CVE-2022-24093 Adobe Commerce post-auth improper input validation leads to remote code execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution...

9.1CVSS9.5AI score0.01461EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/12 7:36 a.m.•13 views

CVE-2022-24093 Adobe Commerce post-auth improper input validation leads to remote code execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution...

9.1CVSS9.3AI score0.01461EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•0 views

CVE-2022-24093: Improper Input Validation

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution...

9.1CVSS7.8AI score0.01461EPSS
SaveExploits0References2
OSV
OSV
•added 2023/08/25 4:15 p.m.•13 views

CVE-2023-40797

In Tenda AC23 v16.03.07.45cn, the sub4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability...

8.8CVSS5.8AI score0.0095EPSS
SaveExploits1References1
NVD
NVD
•added 2023/08/25 4:15 p.m.•22 views

CVE-2023-40797

In Tenda AC23 v16.03.07.45cn, the sub4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability...

8.8CVSS8.9AI score0.0095EPSS
SaveExploits1References1
OSV
OSV
•added 2023/08/25 4:15 p.m.•12 views

CVE-2023-40798

In Tenda AC23 v16.03.07.45cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability...

8.8CVSS5.8AI score0.0095EPSS
SaveExploits1References1
NVD
NVD
•added 2023/08/25 4:15 p.m.•29 views

CVE-2023-40798

In Tenda AC23 v16.03.07.45cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability...

8.8CVSS8.8AI score0.0095EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/25 4:15 p.m.•11 views

CVE-2023-40797

In Tenda AC23 v16.03.07.45cn, the sub4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability...

8.8CVSS7.4AI score0.0095EPSS
SaveExploits1References2
Prion
Prion
•added 2023/08/25 4:15 p.m.•33 views

Stack overflow

In Tenda AC23 v16.03.07.45cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability...

6.5CVSS8.7AI score0.0095EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2023/08/25 3:15 p.m.•33 views

CVE-2023-40802

The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...

6.5CVSS6.6AI score0.00812EPSS
SaveExploits1References1
NVD
NVD
•added 2023/08/25 3:15 p.m.•30 views

CVE-2023-40800

The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

8.8CVSS8.8AI score0.0095EPSS
SaveExploits1References1
OSV
OSV
•added 2023/08/25 3:15 p.m.•14 views

CVE-2023-40802

The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...

6.5CVSS5.9AI score0.00812EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/25 3:15 p.m.•9 views

CVE-2023-40800

The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

8.8CVSS7.4AI score0.0095EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/25 3:15 p.m.•19 views

CVE-2023-40800

The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

8.8CVSS5.9AI score0.0095EPSS
SaveExploits1References1
Prion
Prion
•added 2023/08/25 3:15 p.m.•32 views

Stack overflow

The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...

6.5CVSS8.7AI score0.0095EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/08/25 3:15 p.m.•33 views

Heap overflow

The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...

4CVSS6.6AI score0.00812EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/25 12:00 a.m.•22 views

CVE-2023-40802

The getparentControllistInfo function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45cn...

7.2AI score0.00812EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/08/25 12:00 a.m.•37 views

CVE-2023-40797

In Tenda AC23 v16.03.07.45cn, the sub4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability...

9AI score0.0095EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/08/25 12:00 a.m.•16 views

CVE-2023-40797

In Tenda AC23 v16.03.07.45cn, the sub4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability...

7.4AI score0.0095EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/08/25 12:00 a.m.•20 views

CVE-2023-40798

In Tenda AC23 v16.03.07.45cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability...

7.3AI score0.0095EPSS
SaveExploits1References1
Rows per page
Query Builder