Browse CVEs

CRITICAL 9.8 CVE-2023-41552 Tenda AC7 V1.0 V15.03.06.44 and Tenda AC9 V3.0 V15.03.06.42_multi were discovered to contain a stack overflow via parameter ssid at url /goform/fast_… Ac9 Firmware No fix yet Fix from $2,3002023-08-30 CRITICAL 9.8 CVE-2023-41553 Tenda AC9 V3.0 V15.03.06.42_multi and Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via parameter list at url /gof… Ac9 Firmware No fix yet Fix from $2,3002023-08-30 CRITICAL 9.8 CVE-2023-41554 Tenda AC9 V3.0 V15.03.06.42_multi was discovered to contain a stack overflow via parameter wpapsk_crypto at url /goform/WifiExtraSet. Ac9 Firmware No fix yet Fix from $2,3002023-08-30 CRITICAL 9.8 CVE-2023-41555 Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter security_5g at url /goform/WifiBasicSet. Ac7 Firmware No fix yet Fix from $2,3002023-08-30 CRITICAL 9.8 CVE-2023-41556 Tenda AC7 V1.0 V15.03.06.44, Tenda AC9 V3.0 V15.03.06.42_multi, and Tenda AC5 V1.0RTL_V15.03.06.28 were discovered to contain a stack overflow via pa… Ac9 Firmware No fix yet Fix from $2,3002023-08-30 CRITICAL 9.8 CVE-2023-39268 A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Succe… Arubaos Switch 16.04.0027 / 16.08.0027+ Fix from $2,3002023-08-29 CRITICAL 9.8 CVE-2023-40889 A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information discl… Zbar Mitigation only Fix from $2,3002023-08-29 CRITICAL 9.8 CVE-2023-40890 A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to informatio… Zbar Mitigation only Fix from $2,3002023-08-29 MEDIUM 6.5 CVE-2023-40781 Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf… Libming Patch available Fix from $1,6002023-08-28 HIGH 8.8 CVE-2023-40857 Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the ex… Yara No fix yet Fix from $1,9502023-08-28 CRITICAL 9.8 CVE-2023-40846 Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998. Ac6 Firmware No fix yet Fix from $2,3002023-08-28 CRITICAL 9.8 CVE-2023-40799 Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function. Ac23 Firmware No fix yet Fix from $2,3002023-08-25 MEDIUM 6.5 CVE-2023-40802 The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerabilit… Ac23 Firmware No fix yet Fix from $1,6002023-08-25 HIGH 7.5 CVE-2023-40915 Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This vulnerability allows attackers… Ax3 Firmware No fix yet Fix from $1,9502023-08-25 CRITICAL 9.8 CVE-2023-40897 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40898 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40899 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/… Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40900 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40901 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /g… Ac10v4 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40902 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. Ac10v4 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40904 Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /gofor… Ac10v4 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40891 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40892 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSch… Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40893 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40894 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40895 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 CRITICAL 9.8 CVE-2023-40896 Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. Ac8 Firmware No fix yet Fix from $2,3002023-08-24 HIGH 8.8 CVE-2023-41028 A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this … Rx4 1500 Firmware after 1.0.5 Fix from $1,9502023-08-23 MEDIUM 5.5 CVE-2023-4042 A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. Th… Codeready Linux Builder No fix yet Fix from $1,6002023-08-23 CRITICAL 9.8 CVE-2023-4041 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability i… Gecko Bootloader 4.2.4 / 4.3.2+ Fix from $2,3002023-08-23