487 matches found
PT-2023-4214 · Tenda · Tenda Ac8
Name of the Vulnerable Software and Affected Versions: Tenda AC8 versions prior to V16.03.34.06 Description: The issue is related to a buffer overflow in the get parentControl list Info function of the Tenda AC8 router's firmware, allowing a remote attacker to execute arbitrary code. The...
Tenda AC8 缓冲区错误漏洞
Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1,000 megabytes, supporting dual-band concurrent transmission rates up to 1,167 Mbps, and equipped with full Gigabit ports 1 WAN port + 3 LAN ports to meet the needs of 100-1,000 megabit broadband...
CVE-2023-33675
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the getparentControllistInfo function...
Tenda AC8 缓冲区错误漏洞
Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...
CVE-2023-33670
CVE-2023-33670 affects Tenda AC8 with a stack overflow in the time parameter of the sub_4a79ec function (v16.03.34.06). The vulnerability arises from a boundary error in handling untrusted input, potentially allowing remote code execution or a denial of service. Public sources consistently descri...
CVE-2023-33670
Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub4a79ec function...
SUSE CVE-2006-7196
Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...
SUSE CVE-2009-0781
Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, relat...
CVE-2023-24138
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hosttime parameter in the NTPSyncWithHost function...
TOTOLINK CA300-PoE 命令注入漏洞
The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which originates from a command injection issue in the hosttime parameter of the NTPSyncWithHost method...
CVE-2022-48072
Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...
CVE-2022-46551
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo...
CVE-2022-46551
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo...
Tenda F1203 安全漏洞
The Tenda F1203 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in the Tenda F1203 version 2.0.1.6, which originates from a buffer overflow vulnerability via the time parameter at /goform/saveParentControlInfo...
CVE-2022-46551
Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the time parameter at /goform/saveParentControlInfo...
CVE-2022-46551
CVE-2022-46551 affects the Tenda F1203 router, specifically version 2.0.1.6 , with a reported buffer overflow in the handling of the time parameter at /goform/saveParentControlInfo . The vulnerability is documented with a CVSS v3.1 base score of 7.5 (HIGH) , attack vector NETWORK , complexity LOW...
CVE-2022-45661
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in the setSmartPowerManagement function...
CVE-2022-45656
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function...
