| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-24167 | 7.5 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ. This vulnerability allows attackers to execute arbitrary commands via the dmzHost1 parameter. | 2022-02-08 15:57:00 | 2022-02-04 02:15:00 |
| CVE-2021-45994 | 7.8 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the delDhcpIndex parameter. | 2022-02-08 15:46:00 | 2022-02-04 02:15:00 |
| CVE-2022-24172 | 7.8 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDhcpBindRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the addDhcpRules parameter. | 2022-02-08 15:45:00 | 2022-02-04 02:15:00 |
| CVE-2021-45991 | 7.8 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service (DoS) via the vpnUsers parameter. | 2022-02-08 15:45:00 | 2022-02-04 02:15:00 |
| CVE-2021-45989 | 7.8 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qosGuestUpstream and qosGuestDownstream para | 2022-02-08 15:42:00 | 2022-02-04 02:15:00 |
| CVE-2022-24171 | 7.5 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeServer. This vulnerability allows attackers to execute arbitrary commands via the pppoeServerIP, pppoeServerStartIP, | 2022-02-08 15:41:00 | 2022-02-04 02:15:00 |
| CVE-2022-24170 | 7.5 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTunnel. This vulnerability allows attackers to execute arbitrary commands via the IPsecLocalNet and IPsecRemoteNet p | 2022-02-08 15:41:00 | 2022-02-04 02:15:00 |
| CVE-2021-45988 | 7.8 | Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via the DnsForwardRule parameter. | 2022-02-08 15:40:00 | 2022-02-04 02:15:00 |
| CVE-2020-27978 | 5.0 | Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session. | 2022-02-08 15:39:00 | 2020-10-28 15:15:00 |
| CVE-2022-23873 | 6.5 | Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user_firstname' parameter. | 2022-02-08 15:25:00 | 2022-02-03 03:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici:

