19893 matches found
CVE-2020-13393
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13390
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13390
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13393
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
Buffer overflow
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
Buffer overflow
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
Buffer overflow
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
Buffer overflow
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13389
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13389
CVE-2020-13389 describes a buffer overflow in the httpd of multiple Tenda routers (AC6, AC9, AC15, AC18) where processing POSTed schedStartTime/schedEndTime parameters to /goform/openSchedWifi copies data into a local stack variable via strcpy, overwrite the return address and enable arbitrary co...
CVE-2020-13390
The CVE-2020-13390 entry concerns a buffer overflow in the Tenda router httpd when handling the POST /goform/addressNat entrys and mitInterface parameters. The attacker-supplied value is directly used in a sprintf into a stack-allocated local variable, overwriting a function return address and en...
CVE-2020-13390
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13391
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13391
CVE-2020-13391 affects Tenda AC6/AC9/AC15/AC18 devices (various firmwares). A buffer overflow exists in the httpd when handling the POST /goform/SetSpeedWan with the speed_dir parameter, where the input is directly used in a sprintf to a local stack variable, overwriting the return address and en...
CVE-2020-13392
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...
CVE-2020-13392
CVE-2020-13392 affects several Tenda devices (e.g., AC6, AC9, AC15, AC18) with the HTTP server (/goform/setcfm funcpara1) vulnerable to a buffer overflow. In the affected httpd, a value taken from a POST parameter is directly used in a vulnerable sprintf to a stack-allocated local variable, overw...
CVE-2020-13393
CVE-2020-13393 affects multiple Tenda routers (e.g., AC6/AC9/AC15/AC18) where the httpd web server mishandles POST data to /goform/saveParentControlInfo. The root cause is a buffer overflow: a value from the deviceId and time parameters is copied via strcpy into a stack variable, overwriting the ...
MCIR
This is a collection of intentionally vulnerable applications for testing code injection vulnerabilities. The applications are designed to be used in a trusted web environment and should not be published on a production server or exposed to the internet. The applications include: CryptOMG: A...
File Upload Vulnerability in Extreme CMS
Extreme CMS is an open source PHPCMS web content management system. A file upload vulnerability exists in Extreme CMS, which can be exploited by attackers to gain administrative privileges on the web server...
File upload vulnerability exists in Swordfish Forum (CNVD-2020-33186)
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. A file upload vulnerability exists in Swordfish Forum, which can be exploited by an attacker to gain administrative privileges on the web server...