Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24124 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-18T15:54:59.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wrlEn_DoS
CVE ID: CVE-2023-24125 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:39:08.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey2_5g_DoS
CVE ID: CVE-2023-24126 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:38:21.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey4_5g_DoS
CVE ID: CVE-2023-24127 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:48:04.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey1_DoS
CVE ID: CVE-2023-24128 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:46:28.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey2_DoS
CVE ID: CVE-2023-24129 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:44:58.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey4_DoS
CVE ID: CVE-2023-24130 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:44:05.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey_DoS
CVE ID: CVE-2023-24131 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:42:50.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey1_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey1_5g_DoS
CVE ID: CVE-2023-24132 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:41:24.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey3_5g_DoS
CVE ID: CVE-2023-24133 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:40:27.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey_5g_DoS
CVE ID: CVE-2023-24134 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:39:22.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepkey3_DoS
CVE ID: CVE-2023-24135 State: PUBLISHED Published: 2024-01-22T00:00:00 Last Updated: 2024-09-04T19:34:24.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/img/Pasted%20image%2020230112110814.png - https://oxnan.com/posts/WriteFacMac-Command-Injection
CVE ID: CVE-2023-24138 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-25T20:16:03.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/NTPSyncWithHost/NTPSyncWithHost.md
CVE ID: CVE-2023-24139 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:45:40.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagHost/setNetworkDiag_NetDiagHost.md
CVE ID: CVE-2023-24140 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:45:54.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingNum/setNetworkDiag_NetDiagPingNum.md
CVE ID: CVE-2023-24141 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:46:10.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingTimeOut/setNetworkDiag_NetDiagPingTimeOut.md
CVE ID: CVE-2023-24142 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:41:20.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagPingSize/setNetworkDiag_NetDiagPingSize.md
CVE ID: CVE-2023-24143 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:41:03.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setNetworkDiag_NetDiagTracertHop/setNetworkDiag_NetDiagTracertHop.md
CVE ID: CVE-2023-24144 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:40:49.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setRebootScheCfg_hour/setRebootScheCfg_hour.md
CVE ID: CVE-2023-24145 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:40:31.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setUnloadUserData/setUnloadUserData.md
CVE ID: CVE-2023-24146 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:40:19.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setRebootScheCfg_minute/setRebootScheCfg_minute.md
CVE ID: CVE-2023-24147 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:39:49.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/config/product.ini. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/telnet_hard_code/telnet_hard_code.md
CVE ID: CVE-2023-24148 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:02:54.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/setUploadUserData/setUploadUserData.md
CVE ID: CVE-2023-24149 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:34:07.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_ca300-poe/root_hard_code/root_hard_code.md
CVE ID: CVE-2023-24150 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:33:26.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/meshSlaveDlfw/meshSlaveDlfw.md
CVE ID: CVE-2023-24151 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:32:47.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_ip/recvSlaveCloudCheckStatus_ip.md
CVE ID: CVE-2023-24152 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:31:57.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/meshSlaveUpdate/meshSlaveUpdate.md
CVE ID: CVE-2023-24153 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:30:44.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_version/recvSlaveCloudCheckStatus.md
CVE ID: CVE-2023-24154 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:29:52.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/setUpgradeFW/setUpgradeFW.md
CVE ID: CVE-2023-24155 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:28:51.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/telnet_login/telnet_login.md
CVE ID: CVE-2023-24156 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:00:49.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveUpgstatus/recvSlaveUpgstatus.md
CVE ID: CVE-2023-24157 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T14:57:30.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/updateWifiInfo/updateWifiInfo.md
CVE ID: CVE-2023-24159 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T18:07:55.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admpass/setPasswordCfg_admpass.md
CVE ID: CVE-2023-24160 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T20:20:02.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setPasswordCfg_admuser/setPasswordCfg_admuser.md
CVE ID: CVE-2023-24161 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T20:13:56.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/iceyjchen/VulnerabilityProjectRecords/blob/main/setWebWlanIdx/setWebWlanIdx.md
CVE ID: CVE-2023-24162 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:45:41.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hutool/issues/2855 - https://gitee.com/dromara/hutool/issues/I6AEX2
CVE ID: CVE-2023-24163 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:42:23.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/dromara/hutool/issues/I6AJWJ#note_15801868 - https://github.com/dromara/hutool/releases/tag/5.8.21 - https://github.com/google/osv.dev/issues/2195 - https://gitee.com/dromara/hutool/issues/I6AJWJ#note_20057806_link - https://github.com/dromara/hutool/issues/3149
CVE ID: CVE-2023-24164 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-28T16:19:54.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC18/4/4.md
CVE ID: CVE-2023-24165 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-28T16:18:58.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC18/7/7.md
CVE ID: CVE-2023-24166 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-28T16:17:58.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC18/2/2.md
CVE ID: CVE-2023-24167 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-28T16:16:46.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC18/1/1.md
CVE ID: CVE-2023-24169 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-28T16:15:39.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC18/6/6.md
CVE ID: CVE-2023-24170 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-03-28T16:14:19.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC18/3/3.md
CVE ID: CVE-2023-24180 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T15:35:54.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted elf file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aclements/libelfin/issues/75
CVE ID: CVE-2023-24181 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T15:50:17.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openwrt/luci/commit/25983b9fa572a640a7ecd077378df2790266cd61 - https://github.com/openwrt/luci/commit/749268a2cad4a08722e30f66a578e254885f450f - https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-9gqg-pp5p-q9h
66a578e254885f450f - https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-9gqg-pp5p-q9hg
CVE ID: CVE-2023-24182 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T17:06:37.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openwrt/luci/commit/0186d7eae0e123a409e9919a83fdfecc7945c984 - https://github.com/openwrt/luci/commit/aa7938d4cb3a3f889dead894ea19334ad07ade51 - https://github.com/openwrt/luci/commit/588381e2111079265cc3b20af33507052f1b58cb - https://github.com/ABB-EL
4ad07ade51 - https://github.com/openwrt/luci/commit/588381e2111079265cc3b20af33507052f1b58cb - https://github.com/ABB-EL/external-vulnerability-disclosures/security/advisories/GHSA-7vqh-2r8q-rjg2