153 matches found
CVE-2022-47120
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security5g parameter at /goform/WifiBasicSet...
PT-2022-28019 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered in the security parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, consider restricting access to the...
Buffer overflow
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet...
PT-2022-27891 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered in the security parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...
CVE-2022-46537
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet...
CVE-2022-46537
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet...
Tenda A18 缓冲区错误漏洞
Tenda A18 is an AC1200 dual-band Wi-Fi repeater from Tenda, China. A security vulnerability exists in Tenda A18 version v15.13.07.09, which originates from a stack overflow discovered via the security5g parameter in /goform/WifiBasicSet...
PT-2022-27336 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: A stack overflow issue was discovered, which can be triggered via the security 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A18 version 15.13.07.09, avoid using...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC6 version V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability via the wpapskcrypto parameter in the fromSetWirelessRepeat function...
Tenda AC23 缓冲区错误漏洞
Tenda AC23 is a dual-band gigabit wireless router from Tenda China. tenda AC23 is vulnerable to a buffer overflow vulnerability that stems from the security5g parameter of the formWifiBasicSet function that does not check the length of the input data. No detailed vulnerability details are availab...
Simple Social Buttons < 3.2.1 - Unauthenticated Reflected Cross-Site Scripting
The version 3.2.0 attempted to fix a reflected Cross-Site Scripting issue, by adding a CSRF check, which does not fully remediate it as unauthenticated users will all have the same nonce generated and valid for 12h to 24h, or 2 WP ticks. Only unauthenticated users can be attacked with this issue...
Simple Social Buttons < 3.2.1 - Unauthenticated Reflected Cross-Site Scripting
The version 3.2.0 attempted to fix a reflected Cross-Site Scripting issue, by adding a CSRF check, which does not fully remediate it as unauthenticated users will all have the same nonce generated and valid for 12h to 24h, or 2 WP ticks. Only unauthenticated users can be attacked with this issue...
postgresql: Reconnection can downgrade connection security settings
A flaw was found in postgresql. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could...
Greenmart < 2.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Due to an incomplete fix of CVE-2020-16140 see https://wpscan.com/vulnerability/10444, the reflected XSS attack is still possible on unauthenticated users, by extracting the searchnonce from the source of the homepage and adding it to the original payload. This is possible because WP nonces are...
Greenmart < 2.5.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Due to an incomplete fix of CVE-2020-16140 see https://wpscan.com/vulnerability/10444, the reflected XSS attack is still possible on unauthenticated users, by extracting the searchnonce from the source of the homepage and adding it to the original payload. This is possible because WP nonces are...
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM B2B Advanced Communications (CVE-2015-4000)
Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM B2B Advanced Communications. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to...
Design/Logic Flaw
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...
CVE-2018-5655
The CVE-2018-5655 entry concerns the WordPress plugin weblizar-pinterest-feeds (v1.1.1). The vulnerability is an XSS in the wp-admin/admin-ajax.php security parameter. Affected component is the plugin’s handling of the admin-ajax requests; the exact root cause is not elaborated beyond “XSS exists...
CVE-2018-5655: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...
Design/Logic Flaw
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: C API. Supported versions that are affected are 5.5.55 and earlier and 5.6.35 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...