Lucene search
+L

13 matches found

BDU FSTEC
BDU FSTEC
•added 2026/08/11 12:00 a.m.•5 views

The vulnerability of the formCertListInfo() function in the /goform/CertListInfo file of the Tenda CH22 router microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

9CVSS8.6AI score0.0273EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/09 10:00 a.m.•47 views

CVE-2026-19346 Tenda CH22 CertListInfo formCertListInfo command injection

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS0.0273EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/08/09 10:00 a.m.•19 views

CVE-2026-19346

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS7.7AI score0.0273EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/08/09 10:00 a.m.•15 views

EUVD-2026-54915

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS7.7AI score0.0273EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/09 10:00 a.m.•95 views

CVE-2026-19346

CVE-2026-19346 affects Tenda CH22 firmware 1.0.0.1. The vulnerability is in the formCertListInfo function of /goform/CertListInfo, where manipulating the Name argument can trigger remote command injection. Exploitation is described as remote and has been publicly disclosed. CVSS metrics indicate ...

9CVSS7.7AI score0.0273EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/13 9:31 a.m.•16 views

EUVD-2026-43301

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...

9CVSS7.3AI score0.00854EPSS
SaveExploits0References7
CVE
CVE
•added 2026/07/13 7:15 a.m.•40 views

CVE-2026-15543

The CVE-2026-15543 entry concerns Tenda CH22 firmware 1.0.0.1. The vulnerability affects the function formCertListInfo in /goform/CertListInfo, where manipulating the Name argument triggers a buffer overflow. This is a remote-exploit scenario, with public exploits cited. The available sources pro...

9CVSS8.2AI score0.00854EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/23 12:18 a.m.•22 views

CVE-2022-45525

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

7.5CVSS7.9AI score0.00868EPSS
SaveExploits1References1
OSV
OSV
•added 2022/12/08 4:15 p.m.•13 views

CVE-2022-45525

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

7.5CVSS5.9AI score0.00868EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/08 4:15 p.m.•30 views

Stack overflow

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

5CVSS7.7AI score0.00868EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/12/08 12:00 a.m.•15 views

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the downaction parameter via /goform/CertListInfo...

7.5CVSS7.4AI score0.00868EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/12/08 12:00 a.m.•42 views

CVE-2022-45525

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

7.9AI score0.00868EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2022/12/08 12:00 a.m.•11 views

CVE-2022-45525

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo...

7.9AI score0.00868EPSS
SaveExploits1References1
Rows per page
Query Builder