603 matches found
Tenda M3 安全漏洞
Tenda M3 is an access controller from Tenda, China. A command execution vulnerability exists in Tenda M3 version V1.0.0.124856, which stems from the failure of the TendaTelnet method to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to...
PT-2023-31761 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A stack overflow issue was discovered via the function formGetWeiXinConfig. Recommendations: For Tenda M3 version 1.0.0.124856, as a temporary workaround, consider disabling the formGetWeiXinConfig...
CVE-2023-51092
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function upgrade...
CVE-2023-51093
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...
Tenda M3 安全漏洞
Tenda M3 is an access controller from Tenda, China. A buffer overflow vulnerability exists in Tenda M3 version V1.0.0.124856, which is caused by the upgrade method failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on th...
PT-2023-8326 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: The issue is related to a stack overflow via the fromSetLocalVlanInfo function, which can allow a remote attacker to execute arbitrary code by exploiting a buffer overflow in memory. Recommendations:...
PT-2023-8325 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: The issue is related to a stack overflow via the R7WebsSecurityHandler function, which can allow a remote attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the...
Tenda M3 Security Vulnerability
Tenda M3 is an access controller from Tenda, China. A security vulnerability exists in Tenda M3 version V1.0.0.124856, which originates from a stack overflow vulnerability in the R7WebsSecurityHandler method...
CVE-2023-51091
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function R7WebsSecurityHandler...
CVE-2023-51090
CVE-2023-51090 affects Tenda M3, specifically version 1.0.0.12(4856). The vulnerability is a stack overflow in the formGetWeiXinConfig function, caused by improper input validation/size handling, which can lead to arbitrary code execution or a denial of service. Public references from CNVD and CN...
CVE-2023-51093
The CVE-2023-51093 entry concerns a stack overflow in Tenda M3 V1.0.0.12(4856) caused by the fromSetLocalVlanInfo function. Affected component: fromSetLocalVlanInfo in the M3 firmware; root cause is improper input validation leading to a stack overflow. Impact is described as potential remote cod...
CVE-2023-51091
CVE-2023-51091 affects Tenda M3, where a stack overflow in the R7WebsSecurityHandler has been reported. The vulnerability stems from improper input validation within this handler, potentially enabling arbitrary code execution or denial of service as described in CNVD/PT-2023-8325 briefings and Re...
PT-2023-31762 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A stack overflow issue was discovered via the upgrade function. Recommendations: For Tenda M3 version 1.0.0.124856, consider disabling the upgrade function until a patch is available. At the moment,...
CVE-2023-51095
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function formDelWlRfPolicy...
PT-2023-9097 · Yokogawa · Yokogawa Fa-M3
Name of the Vulnerable Software and Affected Versions: Yokogawa FA-M3 affected versions not specified Description: The issue is related to the FTP server of the Yokogawa FA-M3 programmable logic controller software, which is vulnerable to a connection limit exhaustion. This could allow a remote...
Apache Tomcat 11.0.0-M1 < 11.0.0-M3 Information Disclosure
The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.86, 9.0.0-M1 prior to 9.0.72, 10.1.0-M1 prior to 10.1.6 or 11.0.0-M1 prior to 11.0.0-M3. It is, therefore, affected by an information disclosure due to the RemoteIpFilter. Note that the scanner has not attempted to...
Apache Tomcat Information Disclosure Vulnerability (Mar 2023) - Windows
Apache Tomcat is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat"...
XWiki 3.2-m3 < 13.10.9, 14.x < 14.4.4, 14.5.x < 14.7 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (GHSA-5cf8-vrr8-8hjm)
Xwiki is prone to an exposure of sensitive information to an unauthorized actor vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Apache Tomcat 11.0.0-M1 < 11.0.0-M3 Denial Of Service
The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.85, 9.0.0-M1 prior to 9.0.71, 10.1.0-M1 prior to 10.1.5 or 11.0.0-M1 prior to 11.0.0-M3. It is, therefore, affected by a denial of service due to a vulnerability in the file upload functionality in the Apache Commons...
