Lucene search
+L

8 matches found

Snyk
Snyk
added 2026/06/29 7:28 p.m.8 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...

6.4CVSS5.3AI score0.00213EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/29 7:28 p.m.9 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...

6.4CVSS5.3AI score0.00213EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-27430

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00489EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/11 12:16 a.m.38 views

CVE-2025-57060

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dnsforwardrulestore function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.6AI score0.00489EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/11 12:0 a.m.7 views

Tenda G3 dns_forward_rule_store function buffer overflow vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A buffer overflow vulnerability exists in Tenda G3 v3.0brV15.11.0.17, which originates from the failure of the rules parameter in the dnsforwardrulestore function to correctly validate the length of the input data, and can be exploited by an attacker...

7.5CVSS8.3AI score0.00489EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/09 7:15 p.m.11 views

CVE-2025-57060

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dnsforwardrulestore function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS5.9AI score0.00489EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/09 7:15 p.m.8 views

CVE-2025-57060

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the rules parameter in the dnsforwardrulestore function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS0.00489EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.13 views

PT-2025-36931

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0br V15.11.0.17 Description: The Tenda G3 version 3.0br V15.11.0.17 contains a stack overflow in the rules parameter within the dns forward rule store function. This issue allows attackers to cause a Denial of Service DoS b...

7.5CVSS6.7AI score0.00489EPSS
SaveExploits1References4
Rows per page
Query Builder