CVE-2023-25231

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

CVE-2023-25233

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Buffer overflow

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface...

Buffer overflow

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Buffer overflow

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

CVE-2023-25231

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Dashboard Widgets Suite < 3.2.2 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

多款WAGO产品 访问控制错误漏洞

WAGO Series PFC100 and others are products of WAGO, Germany.WAGO Series PFC100 is a programmable logic controller.WAGO Series PFC200 is a programmable logic controller.WAGO Edge Controller is an edge controller. An access control error vulnerability exists in multiple WAGO products. An attacker...

CVE-2023-25234

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface...

CVE-2023-25231

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Prototype Pollution

firefox is vulnerable to Prototype Pollution. The vulnerability exists due to the URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code...

DEBIAN-CVE-2023-26037

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not properly validated and could be used execute...

Design/Logic Flaw

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727...

CVE-2021-4105

CVE-2021-4105 affects BG-TEK COSLAT Firewall (versions 5.24.0.R.20180630 through 5.24.0.R.20210727). The root cause is improper handling of parameters, enabling Remote Code Inclusion. Impact is unauthenticated remote code execution with high risk to confidentiality, integrity, and availability (p...

VulnCheck KEV: CVE-2023-0586

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Contributor+ role to inject...

All in One SEO Pack < 4.3.0 - Admin+ Stored XSS

The plugin does not sanitise and escape multiple parameters, which could allow high privilege users such as admin to perform Stored XSS attacks even when unfilteredhtml is disallowed...

TypeSquare Webfonts for ConoHa < 2.0.4 - Admin+ Stored XSS

The plugin does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Upgraded Q -> 3 from #148 [1677186744098]

Judge has assessed an item in Issue 148 as 3 risk. The relevant finding follows: Lines of code Vulnerability details Impact Detailed description of the impact of this finding. buyoutLien in LienToken.sol failes to update the new PublicVault's slope, yIntercept, and s.epochData....liensOpenForEpoc...

K23024812: BIG-IP APM vulnerability CVE-2018-5544

Security Advisory Description When the BIG-IP APM system renders certain pages with a logon agent or a confirm box, the system may disclose configuration information such as partition and agent names via URI parameters. CVE-2018-5544 Impact This vulnerability allows unauthorized disclosure of...