PT-2022-27604 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the time parameter in the setSmartPowerManagement function. This issue can be exploited, potentially leading to unintended consequences. Recommendations...

PT-2022-27158 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the parameters week, sTime, and eTime in the setParentalRules function. Recommendations: For TOTOLINK LR350 version...

CVE-2022-43107

Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function...

CVE-2022-43107

Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function...

CVE-2022-43107: Out-of-bounds Write

Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function...

CVE-2022-43029

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg...

CVE-2022-43029

CVE-2022-43029 affects Tenda TX3 (US_TX3V1.0br_V16.03.13.11_multi_TDE01). A stack overflow is triggered via the time parameter in the HTTP endpoint /goform/SetSysTimeCfg. Public sources consistently describe a high-severity, network-accessible issue with CVSSv3.1 base score 9.8 (CRITICAL; all of ...

CVE-2022-43029: Out-of-bounds Write

Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg...

PT-2022-26713 · Tenda · Tenda Tx3

Name of the Vulnerable Software and Affected Versions: Tenda TX3 version US TX3V1.0br V16.03.13.11 multi TDE01 Description: A stack overflow issue was discovered via the time parameter at the "/goform/SetSysTimeCfg" API endpoint. This issue can be exploited, potentially leading to unintended...

Tenda TX3 buffer error vulnerability

Tenda TX3 is a wireless router from Tenda China. A security vulnerability exists in Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01, which originates from a stack overflow in the time parameter parameter of goform/SetSysTimeCfg...

CVE-2022-43260

Tenda AC18 V15.03.05.196318 was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function...

Stack overflow

Tenda AC18 V15.03.05.196318 was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function...

CVE-2022-43260

Tenda AC18 V15.03.05.196318 was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function...

CVE-2022-43260

CVE-2022-43260 affects Tenda AC18 (firmware v15.03.05.19(6318)). The vulnerability is a stack overflow in the fromSetSysTime function caused by insufficient validation of the time parameter. Public references consistently describe it as a stack overflow vulnerability in the time handling path, le...

CVE-2022-43260: Out-of-bounds Write

Tenda AC18 V15.03.05.196318 was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function...

CVE-2022-41524

TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function...

Tenda AC15 and Tenda AC18 have buffer error vulnerabilities

Tenda AC15 and Tenda AC18 are both products of Tenda, a Chinese company.Tenda AC15 is a wireless router.Tenda AC18 is a router. A stack overflow vulnerability exists in Tenda AC15 and AC18 version V15.03.05.19, which originates from the setSmartPowerManagement method with the...

CVE-2022-38541

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the starttime and stoptime parameters in the my2sql interface...

CVE-2022-38537

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the startfile, endfile, starttime, and stoptime parameters in the binlog2sql interface...

Archery SQL injection vulnerability

Archery is a set of open source vulnerability assessment and management tools. A security vulnerability exists in Archery versions v1.8.3 through v1.8.5, which stems from the starttime and stoptime parameters in the my2sql interface containing SQL injection vulnerabilities...