Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-37724 State: PUBLISHED Published: 2022-09-14T20:25:01 Last Updated: 2024-08-03T10:29:21.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces. Additional Analyst Notes: - CVE Program Container: References: - https://xmit.xyz/security/webobjects-url-tomfoolery/ - https://github.com/wocommunity/wonder/pull/992
CVE ID: CVE-2022-37730 State: PUBLISHED Published: 2022-09-07T14:39:15 Last Updated: 2024-08-03T10:29:21.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick him to click on a malicious link or visit a page containing attack code, and send a request to the server (corresponding to the identity authentication information) as the victim without the victim's knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiex/webvue/blob/gh-pages/Ftcms%20CSRF.md
CVE ID: CVE-2022-37731 State: PUBLISHED Published: 2022-09-07T14:40:48 Last Updated: 2024-08-03T10:37:40.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to trigger malicious code when accessing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiex/webvue2/blob/gh-pages/ftcmsxss.md
CVE ID: CVE-2022-37734 State: PUBLISHED Published: 2022-09-12T13:14:35 Last Updated: 2024-08-03T10:37:40.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/graphql-java/graphql-java/issues/2888 - https://github.com/graphql-java/graphql-java/pull/2892 - https://github.com/graphql-java/graphql-java/discussions/2958 - https://github.com/graphql-java/graphql-java/releases
CVE ID: CVE-2022-37767 State: PUBLISHED Published: 2022-09-12T00:00:00 Last Updated: 2024-08-03T10:37:40.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus either the input should not arrive from an untrusted source, or else the application using the engine should apply restrictions to the input. The engine is not responsible for validating the input. Additional Analyst Notes: - CVE Program Container: References: - https://gi
is not responsible for validating the input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Y4tacker/Web-Security/issues/3 - https://github.com/PebbleTemplates/pebble/issues/625#issuecomment-1282138635
CVE ID: CVE-2022-37768 State: PUBLISHED Published: 2022-08-18T19:30:28 Last Updated: 2024-08-03T10:37:40.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/77
CVE ID: CVE-2022-37769 State: PUBLISHED Published: 2022-08-18T19:30:29 Last Updated: 2024-08-03T10:37:40.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/78
CVE ID: CVE-2022-37770 State: PUBLISHED Published: 2022-08-18T19:30:30 Last Updated: 2024-08-03T10:37:40.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thorfdbg/libjpeg/issues/79
CVE ID: CVE-2022-37771 State: PUBLISHED Published: 2022-09-06T18:08:43 Last Updated: 2024-08-03T10:37:40.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.html - https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/
CVE ID: CVE-2022-37772 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-25T20:30:20.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://maarch.com - https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37772/README.md
CVE ID: CVE-2022-37773 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T15:15:09.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://maarch.com - https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37773/README.md
CVE ID: CVE-2022-37774 State: PUBLISHED Published: 2022-11-22T00:00:00.000Z Last Updated: 2025-04-29T04:39:18.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document's URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://maarch.com - https://github.com/frame84/vulns/blob/main/M
ogram Container: - CISA ADP Vulnrichment: References: - http://maarch.com - https://github.com/frame84/vulns/blob/main/MaarchRM/CVE-2022-37774/README.md
CVE ID: CVE-2022-37775 State: PUBLISHED Published: 2022-09-16T16:11:39 Last Updated: 2024-08-03T10:37:40.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter. Additional Analyst Notes: - CVE Program Container: References: - http://genesys.com - https://help.genesys.com/pureconnect/mergedprojects/wh_tr/desktop/pdfs/web_tools_dg.pdf - https://cxsecurity.com/issue/WLB-2022090038 - http://packetstormsecurity.com/files/168410/Genesys-PureConnect-Cross-Site-Scripting.html
CVE ID: CVE-2022-37777 State: PUBLISHED Published: 2022-09-07T23:14:09 Last Updated: 2024-08-03T10:37:40.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution (RCE) vulnerability via the trHops parameter of the tracert function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Tracert_2.md
CVE ID: CVE-2022-37778 State: PUBLISHED Published: 2022-09-07T23:09:01 Last Updated: 2024-08-03T10:37:40.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the current_time parameter of the time function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Time.md
CVE ID: CVE-2022-37779 State: PUBLISHED Published: 2022-09-07T23:20:22 Last Updated: 2024-08-03T10:37:40.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the sendnum parameter of the ping function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SLoSnow9879/Feixun_Router/blob/main/Ping_1.md
CVE ID: CVE-2022-37780 State: PUBLISHED Published: 2022-09-07T16:27:06.000Z Last Updated: 2025-06-17T19:30:23.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnerability via the pingAddr parameter of the tracert function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SLoSnow9879/Phicomm_Router/blob/main/Tracert_1.md
CVE ID: CVE-2022-37781 State: PUBLISHED Published: 2022-08-16T20:13:49 Last Updated: 2024-08-03T10:37:40.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu774/fdkaac/issues/54
CVE ID: CVE-2022-37783 State: PUBLISHED Published: 2022-12-05T00:00:00 Last Updated: 2024-08-03T10:37:40.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: All Craft CMS versions between 3.0.0 and 3.7.32 disclose password hashes of users who authenticate using their E-Mail address or username in Anti-CSRF-Tokens. Craft CMS uses a cookie called CRAFT_CSRF_TOKEN and a HTML hidden field called CRAFT_CSRF_TOKEN to avoid Cross Site Request Forgery attacks. The CRAFT_CSRF_TOKEN cookie discloses the password hash in without encoding it whereas the corresponding HTML hidden field discloses the users' password hash in a masked manner, which can be decoded by using public functions of the
idden field discloses the users' password hash in a masked manner, which can be decoded by using public functions of the YII framework. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://at-trustit.tuv.at/tuev-trust-it-cves/cve-disclosure-of-password-hashes/ - https://cves.at/posts/cve-2022-37783/writeup/ - http://www.openwall.com/lists/oss-security/2024/06/06/1
CVE ID: CVE-2022-37785 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T14:06:03.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WeBankPartners/wecube-plugins-terminal - https://github.com/WeBankPartners/wecube-platform/issues/2329
CVE ID: CVE-2022-37786 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T14:05:14.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources] page, the [Home / Admin / System Params] page, and the [Home / Design / Basekey Configuration] page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WeBankPartners/wecube-platform - https://github.com/WeBankPartners/wecube-platform/issues/2327
CVE ID: CVE-2022-37787 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T13:58:55.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database execution page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WeBankPartners/wecube-platform - https://github.com/WeBankPartners/wecube-platform/issues/2328
CVE ID: CVE-2022-37794 State: PUBLISHED Published: 2022-09-11T23:26:55 Last Updated: 2024-08-03T10:37:40.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anx0ing/CVE_demo/blob/main/2022/Library%20Management%20System%20with%20QR%20code%20Attendance%20and%20Auto%20Generate%20Library%20Card%20-%20SQL%20injections.md
CVE ID: CVE-2022-37796 State: PUBLISHED Published: 2022-09-11T23:31:39 Last Updated: 2024-08-03T10:37:41.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anx0ing/CVE_demo/blob/main/2022/Simple%20Online%20Book%20Store-XSS.md
CVE ID: CVE-2022-37797 State: PUBLISHED Published: 2022-09-12T00:00:00 Last Updated: 2024-08-03T10:37:41.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.lighttpd.net/issues/3165 - https://www.debian.org/security/2022/dsa-5243 - https://lists.debian.org/debian-lts-announce/2022/10/msg00002.html - https://security.gento
org/security/2022/dsa-5243 - https://lists.debian.org/debian-lts-announce/2022/10/msg00002.html - https://security.gentoo.org/glsa/202210-12
CVE ID: CVE-2022-37798 State: PUBLISHED Published: 2022-08-25T14:04:30 Last Updated: 2024-08-03T10:37:41.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/5
CVE ID: CVE-2022-37799 State: PUBLISHED Published: 2022-08-25T14:04:30 Last Updated: 2024-08-03T10:37:42.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/2
CVE ID: CVE-2022-37800 State: PUBLISHED Published: 2022-08-25T14:04:34 Last Updated: 2024-08-03T10:37:41.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/7
CVE ID: CVE-2022-37801 State: PUBLISHED Published: 2022-08-25T14:04:34 Last Updated: 2024-08-03T10:37:41.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/9
CVE ID: CVE-2022-37802 State: PUBLISHED Published: 2022-08-25T14:04:34 Last Updated: 2024-08-03T10:37:41.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/6
CVE ID: CVE-2022-37803 State: PUBLISHED Published: 2022-08-25T14:04:37 Last Updated: 2024-08-03T10:37:41.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/8
CVE ID: CVE-2022-37804 State: PUBLISHED Published: 2022-08-25T14:04:34 Last Updated: 2024-08-03T10:37:41.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/3
CVE ID: CVE-2022-37805 State: PUBLISHED Published: 2022-08-25T14:05:57 Last Updated: 2024-08-03T10:37:41.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/1
CVE ID: CVE-2022-37806 State: PUBLISHED Published: 2022-08-25T14:05:58 Last Updated: 2024-08-03T10:37:42.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/4
CVE ID: CVE-2022-37807 State: PUBLISHED Published: 2022-08-25T14:06:06 Last Updated: 2024-08-03T10:37:42.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/10
CVE ID: CVE-2022-37808 State: PUBLISHED Published: 2022-08-25T14:06:15 Last Updated: 2024-08-03T10:37:41.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/15
CVE ID: CVE-2022-37809 State: PUBLISHED Published: 2022-08-25T14:06:48 Last Updated: 2024-08-03T10:37:41.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/11
CVE ID: CVE-2022-37810 State: PUBLISHED Published: 2022-08-25T14:06:35 Last Updated: 2024-08-03T10:37:41.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/19
CVE ID: CVE-2022-37811 State: PUBLISHED Published: 2022-08-25T14:05:43 Last Updated: 2024-08-03T10:37:42.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/17
CVE ID: CVE-2022-37812 State: PUBLISHED Published: 2022-08-25T14:05:43 Last Updated: 2024-08-03T10:37:41.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/12
CVE ID: CVE-2022-37813 State: PUBLISHED Published: 2022-08-25T14:06:50 Last Updated: 2024-08-03T10:37:41.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/16
CVE ID: CVE-2022-37814 State: PUBLISHED Published: 2022-08-25T14:07:12 Last Updated: 2024-08-03T10:37:41.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function addWifiMacFilter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/14
CVE ID: CVE-2022-37815 State: PUBLISHED Published: 2022-08-25T14:06:55 Last Updated: 2024-08-03T10:37:42.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/18
CVE ID: CVE-2022-37816 State: PUBLISHED Published: 2022-08-25T14:07:19 Last Updated: 2024-08-03T10:37:41.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AC1206/13
CVE ID: CVE-2022-37817 State: PUBLISHED Published: 2022-08-25T14:07:06 Last Updated: 2024-08-03T10:37:41.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/4
CVE ID: CVE-2022-37818 State: PUBLISHED Published: 2022-08-25T14:06:50 Last Updated: 2024-08-03T10:37:42.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/2
CVE ID: CVE-2022-37819 State: PUBLISHED Published: 2022-08-25T14:06:11 Last Updated: 2024-08-03T10:37:41.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/7