Vulnerability index

Browse CVEs

1,819 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2022-28082EPSS 9% Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList. Ax12 Firmware No fix yet Fix from $2,3002022-05-04 CRITICAL 9.8 CVE-2022-28560 There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router. An attac… Ac9 Firmware No fix yet Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2022-28561EPSS 10% There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router. An attacker… Ax12 Firmware No fix yet Fix from $2,3002022-05-03 HIGH 8.8 CVE-2022-28572 Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function Ax1806 Firmware No fix yet Fix from $1,9502022-05-02 MEDIUM 6.5 CVE-2022-27374 Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot. Ax12 Firmware No fix yet Fix from $1,6002022-04-25 MEDIUM 6.5 CVE-2022-27375 Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at /goform/WifiExtraSet. Ax12 Firmware No fix yet Fix from $1,6002022-04-25 CRITICAL 9.8 CVE-2022-27022 There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a s… Ac9 Firmware No fix yet Fix from $2,3002022-04-07 CRITICAL 9.8 CVE-2022-27016 There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn. Ac9 Firmware No fix yet Fix from $2,3002022-04-07 CRITICAL 9.8 CVE-2022-26278 Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function. Ac9 Firmware No fix yet Fix from $2,3002022-03-28 CRITICAL 9.8 CVE-2022-26289 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-26290 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-26536 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27076 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27077 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27078 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27079 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27080 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27081 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27082 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-27083 Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic. M3 Firmware No fix yet Fix from $2,3002022-03-24 CRITICAL 9.8 CVE-2022-25431 Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25433 Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the saveparentcontrolinfo function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25434EPSS 9% Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in the SetFirewallCfg function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25435 Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetStaticRoutecfg function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25437 Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25438 Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the SetIPTVCfg function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25439 Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25440 Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25441 Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability via the vlanid parameter in the SetIPTVCfg function. Ac9 Firmware No fix yet Fix from $2,3002022-03-18 CRITICAL 9.8 CVE-2022-25445EPSS 9% Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function. Ac6 Firmware No fix yet Fix from $2,3002022-03-18