CVE-2023-51092

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function upgrade...

Tenda M3 安全漏洞

Tenda M3 is an access controller from Tenda, China. A command execution vulnerability exists in Tenda M3 version V1.0.0.124856, which stems from the failure of the TendaTelnet method to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to...

PT-2023-31762 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A stack overflow issue was discovered via the upgrade function. Recommendations: For Tenda M3 version 1.0.0.124856, consider disabling the upgrade function until a patch is available. At the moment,...

CVE-2023-51092

CVE-2023-51092 concerns the Tenda M3 device, version V1.0.0.12(4856) . Multiple sources describe a stack overflow in the device’s upgrade function caused by improper input handling. The CNVD/CNNVD entries indicate potential for remote exploitation to execute arbitrary code or trigger a denial of ...

Tenda M3 安全漏洞

Tenda M3 is an access controller from Tenda, China. A buffer overflow vulnerability exists in Tenda M3 version V1.0.0.124856, which stems from the formDelWlRfPolicy method failing to properly validate the length of input data, and can be exploited by a remote attacker to execute arbitrary code on...

CVE-2023-51093

The CVE-2023-51093 entry concerns a stack overflow in Tenda M3 V1.0.0.12(4856) caused by the fromSetLocalVlanInfo function. Affected component: fromSetLocalVlanInfo in the M3 firmware; root cause is improper input validation leading to a stack overflow. Impact is described as potential remote cod...

CVE-2023-51094

Tenda M3 V1.0.0.124856 was discovered to contain a Command Execution vulnerability via the function TendaTelnet...

CVE-2023-51090

CVE-2023-51090 affects Tenda M3, specifically version 1.0.0.12(4856). The vulnerability is a stack overflow in the formGetWeiXinConfig function, caused by improper input validation/size handling, which can lead to arbitrary code execution or a denial of service. Public references from CNVD and CN...

CVE-2023-51095

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function formDelWlRfPolicy...

CVE-2023-51094

The CVE-2023-51094 entry concerns Tenda M3 devices running V1.0.0.12(4856) with a Command Execution vulnerability through the TendaTelnet function. Public sources (CNVD, Red Hat, CNNVD, NVD, PRION, CVE records, PT‑Security) describe that the issue stems from inadequate filtering of constructed co...

PT-2023-9097 · Yokogawa · Yokogawa Fa-M3

Name of the Vulnerable Software and Affected Versions: Yokogawa FA-M3 affected versions not specified Description: The issue is related to the FTP server of the Yokogawa FA-M3 programmable logic controller software, which is vulnerable to a connection limit exhaustion. This could allow a remote...

Apache Tomcat 11.0.0-M1 < 11.0.0-M3 Information Disclosure

The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.86, 9.0.0-M1 prior to 9.0.72, 10.1.0-M1 prior to 10.1.6 or 11.0.0-M1 prior to 11.0.0-M3. It is, therefore, affected by an information disclosure due to the RemoteIpFilter. Note that the scanner has not attempted to...

Apache Tomcat Information Disclosure Vulnerability (Mar 2023) - Windows

Apache Tomcat is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat"...

XWiki 3.2-m3 < 13.10.9, 14.x < 14.4.4, 14.5.x < 14.7 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (GHSA-5cf8-vrr8-8hjm)

Xwiki is prone to an exposure of sensitive information to an unauthorized actor vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Tomcat 11.0.0-M1 < 11.0.0-M3 Denial Of Service

The version of Apache Tomcat installed on the remote host is 8.5.x prior to 8.5.85, 9.0.0-M1 prior to 9.0.71, 10.1.0-M1 prior to 10.1.5 or 11.0.0-M1 prior to 11.0.0-M3. It is, therefore, affected by a denial of service due to a vulnerability in the file upload functionality in the Apache Commons...

SUSE CVE-2016-0779

The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object...

CVE-2022-44874

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component opCallIndirect at /m3exec.h...

PYSEC-2022-43155

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component opCallIndirect at /m3exec.h...

Tenda M3 Router Command Injection (CVE-2022-26289)

A command injection vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tenda M3 Router Buffer Overflow (CVE-2022-32036)

A buffer overflow vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...