Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

7.8CVSS5.8AI score0.00685EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the VMware Tools utility set for Windows operating systems relates to bypassing the authentication process by using an alternative path or channel, allowing an intruder to gain increased privileges.

The vulnerability of the VMware Tools utility for Windows operating systems relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a perpetrator to enhance their privileges within the virtual machine...

7.8CVSS8.1AI score0.00332EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to pointer naming errors, allows attackers to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created malicious file...

5.5CVSS5.4AI score0.00229EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the pm8001_phy_control() function in the Linux kernel SCSI driver allows a hacker to cause a service failure.

The vulnerability of the pm8001phycontrol function in the Linux kernel SCSI driver is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00208EPSS
Exploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the mt7921_ipv6_addr_change() function in the Linux kernel driver allows a hacker to induce a service failure.

The vulnerability of the mt7921ipv6addrchange function in the Linux kernel driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00204EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS7.7AI score0.00616EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.4AI score0.0022EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to memory usage after it is freed, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...

7.8CVSS7.7AI score0.00345EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00219EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.4 views

The vulnerability of the Win32 kernel subsystem in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.00544EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in handling relative pathnames to directories involves errors in processing those paths. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.03227EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.5 views

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems allows a hacker to elevate their privileges to a system level.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system level...

7.8CVSS8AI score0.00533EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the mlx5_eswitch_set_vepa() function in the Mellanox Ethernet adapter driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the mlx5eswitchsetvepa function in the Mellanox Ethernet network adapter driver for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00206EPSS
Exploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to increase their privileges and execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

7.8CVSS5.8AI score0.00765EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the File Sharing function on the administrator web panel of microprogramming router software GL.iNet GL-MT3000 allows a hacker to read arbitrary files.

The vulnerability of the File Sharing function on the administrator web panel of the GL.iNet GL-MT3000 router software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files...

7.8CVSS5.6AI score0.0044EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the Tutor LMS plugin for the WordPress content management system lies in its authentication procedures’ flaws, which allow attackers to escalate their privileges.

The vulnerability of the Tutor LMS plugin for WordPress content management systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

9CVSS5.4AI score0.01023EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

Vulnerability of the Premium Package: Selling Digital Products securely through the WordPress content management system. This vulnerability is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Premium Package plugin – enabling secure sales of digital products through a WordPress website’s content management system – is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely t...

7.6CVSS8.2AI score0.00892EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s automation tool for computer design lies in the possibility of buffer overflow in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00312EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.4 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.2AI score0.00258EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to access to an uninitialized pointer, allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the access to an uninitialized pointer. Exploiting this vulnerability can allow a...

7.8CVSS7.6AI score0.00314EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of Adobe Illustrator, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.2AI score0.00266EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the `load_elf_binary()` function in the Linux kernel file system allows a hacker to trigger a service failure.

The vulnerability of the loadelfbinary function in the Linux kernel file system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00249EPSS
Exploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00153EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary code.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS5.9AI score0.01209EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.13 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.8AI score0.00497EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

Microsoft Edge’s vulnerability relates to the improper handling of symbolic links before accessing a file. This allows attackers to exploit their privileges.

The vulnerability of Microsoft Edge relates to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.4AI score0.00343EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

The vulnerability of the formSetDeviceName() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetDeviceName function in the Tenda F1202 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the deviceId parameter. Exploiting this vulnerability could allow a remote attacker to execut...

10CVSS6.3AI score0.0085EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

The vulnerability of the setLanguageCfg() function in TOTOLINK EX200 router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setLanguageCfg function in TOTOLINK EX200 router microprogramming software lies in the lack of measures taken to clean up data at the control level when processing the langType parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8CVSS5.9AI score0.00975EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.1 views

The vulnerability of the Form_Login() function in TOTOLINK EX200 router microprogramming software allows a intruder to bypass security restrictions.

The vulnerability of the FormLogin function in TOTOLINK EX200 router microprogramming software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

8.8CVSS5.5AI score0.08567EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the setWebWlanIdx() function in TOTOLINK EX200 router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setWebWlanIdx function in TOTOLINK EX200 router microprogramming software is related to the incorrect processing of the webWlanIdx parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary commands remotely...

8.8CVSS5.8AI score0.00926EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.6 views

The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the eMinute parameter. Exploiti...

7.7CVSS8.3AI score0.01476EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the Slider Revolution plugin for WordPress content management systems, related to the unlimited loading of dangerous files, allows a hacker to upload any type of files they want.

The vulnerability of the Slider Revolution plugin for WordPress content management systems is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to write arbitrary files...

9CVSS7.8AI score0.0069EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the formQuickIndex() function in the Tenda F1202 router’s microprogramming software allows a hacker to compromise the accessibility of the protected information.

The vulnerability of the formQuickIndex function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability could allow a malicious actor to compromise th...

6.5CVSS5.7AI score0.00417EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.14 views

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to manipulate the accessibility of protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the accessibility ...

6.5CVSS5.7AI score0.00528EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

10CVSS5.7AI score0.0085EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

The vulnerability of the kvm_set_cpuid() function in the arch/x86/kvm/cpuid.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmsetcpuid function in the arch/x86/kvm/cpuid.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

5.3CVSS6AI score0.00179EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

Vulnerability of the hex2bitmap() function in the drivers/s390/crypto/ap_bus.c module – A driver for cryptography support on the S390 platform of the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the hex2bitmap function in the drivers/s390/crypto/apbus.c module – The Linux kernel’s cryptography driver support on the S390 platform is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.5AI score0.00259EPSS
Exploits0References24Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the formSetSpeedWan() function in the Tenda AC6 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formSetSpeedWan function in the Tenda AC6 router’s microprogramming software is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

10CVSS5.9AI score0.00455EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the check_dws_cooki() function in the wireless repeater software developed by D-Link DAP-1620 allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkdwscooki function in the wireless repeater software from D-Link DAP-1620 relates to the issue of the operation exceeding the buffer boundaries in memory when processing the uid parameter. Exploiting this vulnerability allows an attacker to compromise the...

10CVSS8AI score0.0178EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.1 views

The vulnerability of the formSetDeviceName() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetDeviceName function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the deviceName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

10CVSS6.3AI score0.00807EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the sMinute parameter. Exploiti...

9CVSS8.3AI score0.01573EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient spatial partitioning, allows a hacker to execute arbitrary code.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient spatial separation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the controller’s context, from a remote location...

10CVSS7.2AI score0.99348EPSS
Exploits20References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.1 views

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx, related to insufficient validation of incoming data, allows a hacker to execute arbitrary code.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to insufficient validation of incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.1AI score0.99348EPSS
Exploits21References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the mod_graph_auth_uri_handler() function in D-Link’s wireless repeater software DAP-1620 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the modgraphauthurihandler function in the wireless repeater software from D-Link, the DAP-1620, relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure b...

10CVSS8.4AI score0.0692EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

Microsoft Edge browser vulnerability, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS6AI score0.00754EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the formSetCfm() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score0.00807EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.3 views

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the security5g parameter. Exploiting this vulnerability could allow a remote attacker to execute...

6.5CVSS6.5AI score0.00528EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.5 views

The vulnerability of the setPasswordCfg() function in the microprogramming software for TOTOLINK CA300-PoE allows a hacker to execute arbitrary commands.

The vulnerability of the setPasswordCfg function in the TOTOLINK CA300-PoE router’s microprogramming software is related to the lack of measures taken to clean data at the management level when processing the admpass parameter. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.1AI score0.0192EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.1 views

The vulnerability of the setUpgradeFW() function in TOTOLINK EX200 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setUpgradeFW function in TOTOLINK EX200 router microprogramming software is related to the improper elimination of special elements during the processing of the FileName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS5.9AI score0.00979EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.2 views

The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the eHour parameter. Exploiting...

9CVSS8.3AI score0.01573EPSS
Exploits1References2Affected Software1
Total number of security vulnerabilities74701