264 matches found
CVE-2024-21511: Improper Control of Generation of Code
Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function...
Arbitrary Code Injection
Overview mysql2 is a mostly API compatible with mysqljs and supports majority of features. Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time...
CVE-2024-32320
Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function...
CVE-2024-32320
The Tenda AC500 wireless controller (version 2.0.1.9(1307) ) is affected by a stack-based buffer overflow vulnerability. The flaw exists in the formSetTimeZone function because the timeZone parameter fails to properly validate the length of the input data. An attacker exploiting this could cause ...
CVE-2024-32320
Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function...
PT-2024-24508 · Tenda · Tenda Ac500
Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: The issue is a stack overflow vulnerability that can be exploited via the timeZone parameter in the formSetTimeZone function. This allows for potential unauthorized access or control...
CVE-2024-32320: Stack-based Buffer Overflow
Tenda AC500 V2.0.1.91307 firmware has a stack overflow vulnerability via the timeZone parameter in the formSetTimeZone function...
VulnCheck KEV: CVE-2023-28343
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/settimezone timezone parameter, because of settimezone in models/managementmodel.php...
CVE-2023-44017
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
CVE-2023-44017
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
CVE-2023-44017
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
Stack overflow
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
Tenda AC10 Buffer Error Vulnerability
Tenda AC10 is a wireless router from Tenda China. A buffer error vulnerability exists in the Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 version, which stems from a discovery of a contained stack overflow via the timeZone parameter in the fromSetSysTime function...
CVE-2023-44017
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
CVE-2023-44017
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function...
CVE-2023-41558
Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...
Stack overflow
Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...
Tenda AC7 缓冲区错误漏洞
The Tenda AC7 is a dual-band wireless router with a strong signal and stable performance for large, multi-bedroom users. The Tenda AC7 suffers from a stack buffer overflow vulnerability that originates from the timeZone parameter of /goform/SetSysTimeCfg failing to correctly validate the length a...
PT-2023-27976 · Tenda · Tenda Ac7
Name of the Vulnerable Software and Affected Versions: Tenda AC7 version V15.03.06.44 Description: A stack overflow issue was discovered via the timeZone parameter at the "/goform/SetSysTimeCfg" API endpoint. This issue affects the Tenda AC7 router. Recommendations: For Tenda AC7 version...