Lucene search
+L

51 matches found

Vulnrichment
Vulnrichment
added 2025/11/17 3:32 p.m.7 views

CVE-2025-13288 Tenda CH22 PPTPUserSetting fromPptpUserSetting buffer overflow

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed...

9CVSS6.8AI score0.00878EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/17 3:32 p.m.36 views

CVE-2025-13288

CVE-2025-13288 affects Tenda CH22 firmware 1.0.0.1. The vulnerability is in the fromPptpUserSetting function (file /goform/PPTPUserSetting); manipulating the delno argument triggers a buffer overflow. This condition enables remote, unauthenticated access with high impact on confidentiality, integ...

9CVSS8.7AI score0.00878EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2025/07/25 12:00 a.m.7 views

Tenda FH451 formPPTPUserSetting function buffer overflow vulnerability

Tenda FH451 is a single-band 2.4GHz SOHO wireless router launched by China Tenda, with a maximum transmission rate of 450Mbps, belonging to the series of products of the King of Wall Penetration. The Tenda FH451 suffers from a buffer overflow vulnerability, which originates from the failure to...

9CVSS8.3AI score0.0082EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:00 a.m.9 views

The vulnerability of the fromPptpUserSetting() function in the /goform/PPTPUserSetting file of the Tenda FH451 router’s software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromPptpUserSetting function in the /goform/PPTPUserSetting file of the Tenda FH451 router’s microprogramming system is related to buffer overflow during the processing of the delno parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

9CVSS8.4AI score0.0082EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.6 views

Tenda FH451 安全漏洞

Tenda FH451 is a single-band 2.4GHz SOHO wireless router launched by China Tenda, with a maximum transmission rate of 450Mbps, belonging to the series of products of the King of Wall Penetration. The Tenda FH451 suffers from a buffer overflow vulnerability, which originates from the failure to...

9CVSS8.2AI score0.0082EPSS
SaveExploits1References7
OSV
OSV
added 2025/07/13 4:15 p.m.10 views

CVE-2025-7531

A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14408. This affects the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

8.7CVSS6.3AI score0.01EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/13 12:00 a.m.24 views

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router from Tenda China. The Tenda FH1202 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the function fromPptpUserSetting parameter delno in the file /goform/PPTPUserSetting failing to correctly validate the length of the inp...

9CVSS8.2AI score0.01EPSS
SaveExploits1References6
Oracle linux
Oracle linux
added 2025/06/18 12:00 a.m.20 views

idm:DL1 security update

bind-dyndb-ldap 11.6-6 - Fix rpminspect warnings Resolves: RHEL-22497 custodia ipa 4.9.13-18.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 4.9.13-18 - Set krbCanonicalName admin@REALM on the admin user Resolves: RHEL-89895 4.9.13-17 - kdb: keeep ipadbgetconnection from...

9.1CVSS7.1AI score0.01957EPSS
SaveExploits1
Snyk
Snyk
added 2024/10/22 6:32 p.m.10 views

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the redirect parameter in Commerce Catalogs. An attacker can perform administrative actions, execute arbitrary code, and alter user settings by convincing a user to follow a malicious link. Remediatio...

8.8CVSS7.4AI score0.00355EPSS
SaveExploits0References2
NVD
NVD
added 2021/08/31 4:15 p.m.29 views

CVE-2021-35213

An Improper Access Control Privilege Escalation Vulnerability was discovered in the User Setting of Orion Platform version 2020.2.5. It allows a guest user to elevate privileges to the Administrator using this vulnerability. Authentication is required to exploit the vulnerability...

9CVSS0.03369EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/04/14 12:00 a.m.12 views

Solarwinds Orion Platform 安全漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...

9.8CVSS5.6AI score0.03981EPSS
SaveExploits0References2
Rows per page
Query Builder