Lucene search
+L

2000 matches found

CNNVD
CNNVD
•added 2024/05/20 12:00 a.m.•17 views

Tenda AX1806 安全漏洞

The Tenda AX1806 is a home wireless router device. The Tenda AX1806 suffers from a stack overflow vulnerability that originates from the iptv.city.vlan parameter in the function formSetIptv, for which no detailed vulnerability details have been provided...

7.7CVSS7.4AI score0.00417EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2024/05/17 10:23 p.m.•35 views

CVE-2024-35789

CVE-2024-35789 is a vulnerability in the Linux kernel’s Wi-Fi subsystem mac80211. It occurs when a station is moved out of a VLAN, and the VLAN is subsequently deleted. A reference to the deleted VLAN’s network device may remain, leading to a use-after-free condition. This can result in system...

5.5CVSS7.7AI score0.00355EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/17 1:15 p.m.•15 views

UBUNTU-CVE-2024-35789

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS6.5AI score0.00355EPSS
SaveExploits0References30
UbuntuCve
UbuntuCve
•added 2024/05/17 1:15 p.m.•41 views

CVE-2024-35789

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS6.4AI score0.00355EPSS
SaveExploits0References29
CVE
CVE
•added 2024/05/17 12:24 p.m.•218 views

CVE-2024-35789

CVE-2024-35789 – Linux kernel : Vulnerability in wifi/mac80211 VLAN handling where on moving a station out of a VLAN and deleting the VLAN, the fast_rx entry could still point to the VLAN netdev, enabling a use-after-free. The fixed behavior is to immediately call ieee80211_check_fast_rx after VL...

8CVSS6.7AI score0.00355EPSS
SaveExploits0References12Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/17 12:24 p.m.•30 views

CVE-2024-35789 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS6.8AI score0.00355EPSS
SaveExploits0References9
OSV
OSV
•added 2024/05/17 12:24 p.m.•22 views

CVE-2024-35789 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS5.9AI score
SaveExploits0References15
Cvelist
Cvelist
•added 2024/05/17 12:24 p.m.•36 views

CVE-2024-35789 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS7.4AI score0.00355EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2024/05/17 12:24 p.m.•28 views

CVE-2024-35789

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS7.5AI score0.00355EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•2 views

CVE-2024-35789: Use After Free

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fastrx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free...

8CVSS5.7AI score0.00355EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•48 views

PT-2024-3832 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 1.2.0.88155 Description: The issue is related to a command injection vulnerability. It can be exploited via the mac parameter at the "/ip/goform/WriteFacMac" endpoint, allowing a remote attacker to execute arbitrary...

9.8CVSS8.3AI score0.0184EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/05/03 12:00 a.m.•5 views

PT-2024-4095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the do setvfinfo function in the net/core/rtnetlink.c module of the Linux kernel, which is associated with a buffer overflow vulnerability. This vulnerability may...

6.8CVSS0.00249EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/04/23 12:00 a.m.•30 views

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system allows a hacker to execute arbitrary commands on behalf of the dbus user.

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...

9.1CVSS8.1AI score0.0392EPSS
SaveExploits1References6Affected Software1
CNVD
CNVD
•added 2024/04/22 12:00 a.m.•17 views

Tenda AC500 fromSetVlanInfo Method Buffer Overflow Vulnerability

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, supporting cross-VLAN management of wireless networks. A buffer overflow vulnerability exists in the Tenda AC500, which originates from the port parameter of the fromSetVlanInfo method of the...

7.5CVSS7.4AI score0.00807EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/17 4:15 p.m.•14 views

CVE-2024-32318

Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function...

9.8CVSS5.8AI score0.00775EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/17 4:15 p.m.•25 views

CVE-2024-32318

Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function...

9.8CVSS7.1AI score0.00775EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/17 4:15 p.m.•15 views

CVE-2023-46060

A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component...

7.5CVSS6AI score0.00807EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/04/17 12:00 a.m.•22 views

CVE-2024-32318

Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the vlan parameter in the formSetVlanInfo function...

7.5AI score0.00775EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•14 views

PT-2024-24506 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: The issue is related to a stack overflow vulnerability. It occurs via the vlan parameter in the formSetVlanInfo function. Recommendations: For version 2.0.1.91307, as a temporary workaround, consid...

9.8CVSS7AI score0.00775EPSS
SaveExploits1References3
CVE
CVE
•added 2024/04/17 12:00 a.m.•79 views

CVE-2024-32318

The Tenda AC500 wireless controller (version 2.0.1.9(1307) ) is susceptible to a stack overflow vulnerability. The root cause is the formSetVlanInfo method's failure to properly validate the length of the vlan parameter input. An attacker could exploit this to execute arbitrary code on the system...

9.8CVSS7.4AI score0.00775EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder