Lucene search
+L

112 matches found

Positive Technologies
Positive Technologies
•added 2026/03/07 12:00 a.m.•19 views

PT-2026-23886

Name of the Vulnerable Software and Affected Versions Tenda FH451 version 1.0.0.9 Description A flaw exists in Tenda FH451 version 1.0.0.9 related to a stack-based buffer overflow. The issue is located in the fromSetCfm function within the /goform/setcfm file. Manipulation of the funcname/funcpar...

9CVSS7.9AI score0.01048EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/03/07 12:00 a.m.•21 views

Tenda FH451 安全漏洞

The Tenda FH451 is a router produced by the Chinese company Tenda. Version 1.0.0.9 of the Tenda FH451 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters funcname/funcpara1 in the file/goform/setcfm, which may lead to a stack buffer overflow...

9CVSS7.7AI score0.01048EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-42596

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01203EPSS
SaveExploits3References2
RedhatCVE
RedhatCVE
•added 2025/09/21 12:11 a.m.•27 views

CVE-2025-57528

An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function uri path: SetCfm...

7.7CVSS7AI score0.00444EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/19 12:00 a.m.•21 views

PT-2025-38541

Name of the Vulnerable Software and Affected Versions Tenda AC6 versions 15.03.05.16 Description An issue exists in Tenda AC6 that allows attackers to cause a denial of service. This is achieved by manipulating the funcname, funcpara1, and funcpara2 parameters within the /SetCfm API endpoint,...

7.7CVSS6.8AI score0.00444EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/09/19 12:00 a.m.•8 views

CVE-2025-57528

An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function uri path: SetCfm...

6.6AI score0.00444EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/06 12:15 a.m.•18 views

CVE-2025-4298

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affects the function formSetCfm of the file /goform/setcfm. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publ...

9.8CVSS6.2AI score0.01157EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/05/05 12:00 a.m.•14 views

Tenda AC1206 安全漏洞

The Tenda AC1206 is a wireless Gigabit router from Tenda China. The Tenda AC1206 suffers from a buffer overflow vulnerability that affects the formSetCfm function in the /goform/setcfm file. An attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS7.9AI score0.01157EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/04/03 12:00 a.m.•21 views

Tenda W6-S setcfm function buffer overflow vulnerability

Tenda W6-S is a 300Mbps wireless panel AP designed for large households such as homes, hotels and villas to provide stable wireless network coverage and low latency network experience. The Tenda W6-S suffers from a buffer overflow vulnerability that originates from the setcfm function failing to...

7.5CVSS7.2AI score0.00476EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/28 2:15 p.m.•11 views

CVE-2025-28220

Tenda W6S v1.0.0.4510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request...

7.5CVSS5.9AI score0.00476EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•11 views

Tenda W6 安全漏洞

Tenda W6-S is a 300Mbps wireless panel AP designed for large households such as homes, hotels and villas to provide stable wireless network coverage and low latency network experience. The Tenda W6-S suffers from a buffer overflow vulnerability that originates from the setcfm function failing to...

7.5CVSS7.2AI score0.00476EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•1 views

CVE-2025-28220: Buffer Copy without Checking Size of Input

Tenda W6S v1.0.0.4510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request...

7.5CVSS6AI score0.00476EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/28 12:00 a.m.•65 views

CVE-2025-28220

The Tenda W6_S (v1.0.0.4_510) wireless panel AP is vulnerable to a Buffer Overflow in the setcfm function. The root cause is a failure to properly validate the length of input data provided via the funcpara1 parameter during a POST request . A remote attacker can exploit this to cause a web serve...

7.5CVSS7.2AI score0.00476EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/09/26 12:00 a.m.•13 views

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming software for the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming system for the wireless access point Tenda is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause...

10CVSS8.4AI score0.01255EPSS
SaveExploits1References5
OSV
OSV
•added 2024/08/28 12:15 a.m.•15 views

CVE-2024-8226

A vulnerability has been found in Tenda O1 1.0.0.710648 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The explo...

9.8CVSS6.5AI score0.01255EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/28 12:00 a.m.•2 views

CVE-2024-8226: Stack-based Buffer Overflow

A vulnerability has been found in Tenda O1 1.0.0.710648 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The explo...

9.8CVSS8.3AI score0.01255EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/08/27 11:31 p.m.•60 views

CVE-2024-8226 Tenda O1 setcfm formSetCfm stack-based overflow

A vulnerability has been found in Tenda O1 1.0.0.710648 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The explo...

9CVSS0.01255EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/27 12:00 a.m.•12 views

Tenda O1 安全漏洞

Tenda O1 is a dedicated bridge for elevator monitoring from Tenda China. Tenda O1 suffers from a buffer overflow vulnerability, which originates from the funcpara1 parameter of the formSetCfm function in the /goform/setcfm file that fails to correctly validate the length and size of the input dat...

9.8CVSS8.2AI score0.01255EPSS
SaveExploits1References7
OSV
OSV
•added 2024/07/24 9:15 p.m.•13 views

CVE-2024-41465

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...

7.5CVSS6.2AI score0.00552EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/24 9:15 p.m.•28 views

CVE-2024-41465

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...

7.5CVSS0.00552EPSS
SaveExploits1References1
Rows per page
Query Builder