10093 matches found
CVE-2024-42942
CVE-2024-42942 affects Tenda FH1201 v1.2.0.14 (408). The vulnerability is a stack overflow in the frmL7ImForm function triggered via the page parameter, allowing a remote attacker to cause a Denial of Service with a crafted POST request. Impact is DoS; no information about code execution or broad...
CVE-2024-42974
CVE-2024-42974 affects Tenda FH1206 v02.03.01.35. A stack overflow in the fromwebExcptypemanFilter function is triggered by the page parameter, allowing DoS via a crafted POST request. No vendor patch/version is specified in the provided documents. A PT-Security report suggests a temporary workar...
CVE-2024-42983
CVE-2024-42983 involves the Tenda FH1206 router, specifically version 02.03.01.35, which is affected by a stack overflow in the pptpPPW parameter within the fromAdvSetWan function. The vulnerability allows an attacker to trigger a Denial of Service (DoS) by sending a crafted POST request, with th...
CVE-2024-42980
CVE-2024-42980 affects Tenda FH1206 v02.03.01.35, where a stack overflow in the frmL7ImForm function can be triggered by the page parameter, enabling a DoS via crafted POST requests. Concrete details across multiple sources confirm the affected version and vulnerability class; Red Hat/CNNVD/CVE l...
CVE-2024-42985
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-42944
Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-42953
Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPW parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-42973
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-42968
Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the Go parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2024-42950
CVE-2024-42950 affects Tenda FH1201 router, specifically v1.2.0.14 (408). The root cause is a stack overflow in the fromSafeClientFilter function triggered by the Go parameter, enabling a Denial of Service via a crafted POST request. Documents consistently describe a DoS impact and do not provide...
CVE-2024-42985
CVE-2024-42985 affects Tenda FH1206, specifically version 02.03.01.35, with a stack overflow in the fromNatlimit function triggered by the page parameter. A crafted POST request can cause a Denial of Service. Public sources in the connected documents describe the vulnerability’s root cause and im...
CVE-2024-7707
A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow...
CVE-2024-7707 Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow
A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow...
CVE-2024-7707 Tenda FH1206 HTTP POST Request SafeEmailFilter formSafeEmailFilter stack-based overflow
A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow...
CVE-2024-7707: Stack-based Buffer Overflow
A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow...
CVE-2024-7657: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/updaterows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...
CVE-2024-7657 Gila CMS HTTP POST Request page cross site scripting
A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/updaterows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...
CVE-2024-7657 Gila CMS HTTP POST Request page cross site scripting
A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/updaterows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...
CVE-2024-7657
A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/updaterows/page?id=2 of the component HTTP POST Request Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated...
TOTOLINK EX200 Router getSaveConfig Function
The vulnerability of the getSaveConfig function /cgi-bin/cstecgi.cgi?action=save&setting in the TOTOLINK EX200 router software arises due to a buffer overflow occurring during the processing of the httphost parameter. Exploiting this vulnerability allows an attacker to compromise the...