Lucene search
+L

26076 matches found

OSV
OSV
added 2024/03/27 8:15 p.m.9 views

CVE-2024-2994

A vulnerability was found in Tenda FH1203 2.0.1.6. It has been declared as critical. Affected by this vulnerability is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched...

8.8CVSS8AI score0.01481EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/27 5:15 p.m.11 views

CVE-2024-2987

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

8.8CVSS6.3AI score0.01584EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/27 4:15 p.m.10 views

CVE-2024-2982

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and...

8.8CVSS5.5AI score0.08161EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/03/27 3:31 p.m.13 views

CVE-2024-2982 Tenda FH1202 WriteFacMac formWriteFacMac command injection

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to command injection. The exploit has been disclosed to the public and...

5.5CVSS7.3AI score0.08161EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.6 views

Tenda FH1202 命令注入漏洞

The Tenda FH1202 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1202 version 1.2.0.14408, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

8.8CVSS6.1AI score0.08161EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.9 views

The vulnerability of the addWifiMacFilter() function (/goform/addWifiMacFilter) in the Tenda AC15 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the addWifiMacFilter function /goform/addWifiMacFilter of the Tenda AC15 router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the deviceId and deviceMac parameters. Exploiting this vulnerability could...

10CVSS7.8AI score0.01315EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.15 views

PT-2024-23161 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue has been found, affecting the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument mac leads to a stack-based buffer overflow. Th...

9CVSS8.9AI score0.01481EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.10 views

Tenda FH1203 安全漏洞

The Tenda FH1203 is a wireless router from the Chinese company Tenda. A security vulnerability exists in the Tenda FH1203 version 2.0.1.6 due to a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

9CVSS9AI score0.01481EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.10 views

Tenda FH1205 命令注入漏洞

The Tenda FH1205 is a wireless router from Tenda, China. A command injection vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a command injection in the mac parameter of the formWriteFacMac method of the /goform/WriteFacMac file...

8.8CVSS7AI score0.07932EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.11 views

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the mac parameter of the GetParentControlInfo method of the /goform/GetParentControlInfo file...

9CVSS9.1AI score0.01849EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.14 views

The vulnerability of the formWriteFacMac() function (/goform/WriteFacMac) in the Tenda AC15 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function /goform/WriteFacMac of the Tenda AC15 router software lies in the lack of measures taken to neutralize special elements used in the OS commands when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS7AI score0.0405EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/27 12:00 a.m.22 views

Google Chrome Security Update (stable-channel-update-for-desktop_12-2024-03) - Mac OS X

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

8.8CVSS8.6AI score0.00706EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2024/03/27 12:00 a.m.48 views

Google Chrome Security Update (stable-channel-update-for-desktop_26-2024-03) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.4AI score0.17922EPSS
SaveExploits8References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.16 views

PT-2024-23093 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability has been found, affecting the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument mac leads to a stack-based buffer...

9CVSS8.7AI score0.01584EPSS
SaveExploits1References7
OSV
OSV
added 2024/03/26 9:15 p.m.10 views

CVE-2024-2903

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely...

8.8CVSS6.3AI score0.01849EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/03/26 6:31 p.m.34 views

CVE-2024-2897 Tenda AC7 WriteFacMac formWriteFacMac os command injection

A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44. Affected is the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclose...

6.5CVSS7.2AI score0.0783EPSS
SaveExploits2References4
OSV
OSV
added 2024/03/26 3:15 p.m.9 views

CVE-2024-23482

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7.8CVSS5.8AI score0.00275EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/26 3:15 p.m.18 views

CVE-2024-23482

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7.8CVSS6.9AI score0.00275EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 2:23 p.m.78 views

CVE-2024-23482

CVE-2024-23482 describes a local privilege escalation in the ZScalerService process of Zscaler Client Connector for macOS. Affected: Zscaler Mac ZApp versions prior to 4.2.0.241. Root cause: local privilege escalation in ZScalerService. Impact is high for confidentiality, integrity, and availabil...

7.8CVSS7AI score0.00275EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/26 2:23 p.m.26 views

CVE-2024-23482 ZScalerService Local Privilege Escalation

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

7CVSS7AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder