CVE-2023-40705

Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-40535

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-40705

The CVE-2023-40705 entry concerns the VI Web Client (i-PRO VI Web Client) prior to version 7.9.6. The vulnerability is a Stored Cross-Site Scripting (XSS) issue in the Map setting page that allows a remote authenticated attacker to inject arbitrary scripts when accessing a specially crafted page....

CVE-2023-40535

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...

PT-2023-27603 · Unknown · Vi Web Client

Name of the Vulnerable Software and Affected Versions: VI Web Client versions prior to 7.9.6 Description: A stored cross-site scripting issue in the Map setting page allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions prior to 7.9.6, update to versi...

PT-2023-22919 · Unknown · Wifiapautohotspotenablingactivity

Name of the Vulnerable Software and Affected Versions: WifiApAutoHotspotEnablingActivity versions prior to SMR Sep-2023 Release 1 Description: The issue is related to the improper export of android application components, allowing a local attacker to change the Auto Hotspot setting. This can be...

PT-2023-27501 · Unknown · Vi Web Client

Name of the Vulnerable Software and Affected Versions: VI Web Client versions prior to 7.9.6 Description: A stored cross-site scripting issue in the View setting page of VI Web Client allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions prior to 7.9....

Xxe

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

CVE-2023-41559

Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42multi, and Tenda AC5 V1.0RTLV15.03.06.28 were discovered to contain a stack overflow via parameter page at url /goform/NatStaticSetting...

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

CVE-2023-41552

Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42multi were discovered to contain a stack overflow via parameter ssid at url /goform/fastsettingwifiset...

Tenda AC7 缓冲区错误漏洞

Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the page parameter of /goform/NatStaticSetting...

Tenda AX3 form_fast_setting_wifi_set function stack buffer overflow vulnerability

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from the formfastsettingwifis...

SUSE CVE-2020-21583

An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date...

CVE-2023-40915

Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the ssid parameter...

CVE-2023-40915

Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the ssid parameter...

Tenda AX3 缓冲区错误漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from the formfastsettingwifis...

CVE-2023-40708 Improper Access Control in OPTO 22 SNAP PAC S1

The File Transfer Protocol FTP port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files...