Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43907 State: PUBLISHED Published: 2023-10-01T00:00:00 Last Updated: 2024-09-23T16:45:51.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://optipng.sourceforge.net/ - https://sourceforge.net/projects/optipng/files/OptiPNG/optipng-0.7.7/optipng-0.7.7.tar.gz/download?use_mirror=udomain&download= - https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/optipng-global-buffer-overflow1/optipng-global-buffer-overflow1.md - https://lists.fedoraproject.org/archives/list/p
ain/optipng-global-buffer-overflow1/optipng-global-buffer-overflow1.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBHVG5LDE2K3FZSIK4XFXOUXSE7NZ5JH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCG5CMDT37WCZGAWQNOIPVP4VHGCPUU3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAB22JXDE7O27DYARZXC7PFUETM5OOT5/
CVE ID: CVE-2023-43909 State: PUBLISHED Published: 2023-09-29T00:00:00 Last Updated: 2024-09-23T16:45:28.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.notion.so/SQL-Injection-vulnerability-in-app_contact-parameter-on-appsearch-php-directory-2e3daa8975164ee18217c52c43ae1a22
CVE ID: CVE-2023-43944 State: PUBLISHED Published: 2023-09-29T00:00:00 Last Updated: 2024-09-23T16:40:52.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability was found in SourceCodester Task Management System 1.0. It allows attackers to execute arbitrary code via parameter field in index.php?page=project_list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://purring-climb-52a.notion.site/Reflected-Cross-site-scripting-b6fd50b94b464313847bb52d4049154f?pvs=4
CVE ID: CVE-2023-43951 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-25T15:56:28.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-43951
CVE ID: CVE-2023-43952 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T15:55:08.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-43952
CVE ID: CVE-2023-43953 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T15:52:50.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-43953
CVE ID: CVE-2023-43955 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-08-02T19:52:11.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/actuator/com.phlox.tvwebbrowser - https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/poc.apk - https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/CWE-94.md -
tor/com.phlox.tvwebbrowser/blob/main/poc.apk - https://github.com/actuator/com.phlox.tvwebbrowser/blob/main/CWE-94.md - https://github.com/truefedex/tv-bro/pull/182#issue-1901769895
CVE ID: CVE-2023-43956 State: REJECTED Published: N/A Last Updated: 2024-01-19T19:43:50.448062 Description: No description available.
CVE ID: CVE-2023-43958 State: PUBLISHED Published: 2025-04-22T00:00:00.000Z Last Updated: 2025-04-23T13:33:56.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://flashy-lemonade-192.notion.site/Unauthenticated-arbitrary-file-upload-via-jQuery-File-Upload-in-Hospital-Management-System-3c02c1e8ef65432686321fcbad78bb1e?pvs=4 - https://flashy-lemonade-192.notion.site/Unauthenticated-arbit
Management-System-3c02c1e8ef65432686321fcbad78bb1e?pvs=4 - https://flashy-lemonade-192.notion.site/Unauthenticated-arbitrary-file-upload-via-jQuery-File-Upload-in-Hospital-Management-System-3c02c1e8ef65432686321fcbad78bb1e
CVE ID: CVE-2023-43959 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-16T16:07:24.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%40tahaafarooq/auth_rce_voip - https://www.exploit-db.com/exploits/50509
CVE ID: CVE-2023-43960 State: PUBLISHED Published: 2023-10-11T00:00:00 Last Updated: 2024-09-18T16:13:12.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%40tahaafarooq/dlink-dph-400se-cwe-200 - https://www.exploit-db.com/exploits/51709
CVE ID: CVE-2023-43961 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T19:34:53.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/Sa-Token/issues/511
CVE ID: CVE-2023-43962 State: PUBLISHED Published: 2024-12-09T00:00:00 Last Updated: 2024-12-11T20:38:34.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary code via the project name function in the project settings tab. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Cosemz/CVE/blob/main/xunruicms/XunRuiCms%20Stored%20XSS%20%28Authenticated%29.md
CVE ID: CVE-2023-43971 State: PUBLISHED Published: 2024-07-17T00:00:00.000Z Last Updated: 2025-03-19T17:49:54.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/lizhipay/acg-faka/issues/72 - https://gist.github.com/N0boy-0/7251856fed517eb6358d8cae03099b7b
CVE ID: CVE-2023-43976 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T15:47:08.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.catonetworks.com - https://www.ns-echo.com/posts/cve_2023_43976.html
CVE ID: CVE-2023-43979 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T18:07:39.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontController::getPosts(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/11/14/ybc_blog.html
CVE ID: CVE-2023-43980 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:14:23.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disable_json.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.presto-changeo.com/prestashop/home/158-test-site-creator.html - https://security.friendsofpresta.org/modules/2023/09/28/testsitecreator-89.html
CVE ID: CVE-2023-43981 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T19:22:23.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component delete_excluded_folder.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/03/testsitecreator.html
CVE ID: CVE-2023-43982 State: PUBLISHED Published: 2023-11-03T00:00:00 Last Updated: 2024-09-05T14:41:21.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at insta_parser.php. This vulnerability allows attackers to use the vulnerable website as proxy to attack other websites or exfiltrate data via a HTTP call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/11/02/boninstagramcarousel.html
CVE ID: CVE-2023-43983 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T19:02:37.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disable_json.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/03/attributegrid.html
CVE ID: CVE-2023-43984 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T13:12:15.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download user information from the ps_customer table. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/11/07/advancedexport.html
CVE ID: CVE-2023-43985 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-16T19:10:07.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sunnytoo.com/product/panda-creative-responsive-prestashop-theme - https://security.friendsofpresta.org/modules/2024/01/18/stblogsearch.html
CVE ID: CVE-2023-43986 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T19:47:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getAttachmentByToken. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/fr/declinaisons-personnalisation/20343-configurateur-avance-de-produit-sur-mesure-par-etape.html - https://security.friendsofpresta.org/modules/2023/10/19/configurator.html
CVE ID: CVE-2023-43988 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-11T16:52:08.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43988.md
CVE ID: CVE-2023-43989 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-16T16:55:19.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43989.md
CVE ID: CVE-2023-43990 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-05-30T14:17:42.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43990.md
CVE ID: CVE-2023-43991 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-05-30T14:17:37.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43991.md
CVE ID: CVE-2023-43992 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-20T19:22:28.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43992.md
CVE ID: CVE-2023-43993 State: PUBLISHED Published: 2024-01-24T00:00:00 Last Updated: 2024-09-04T19:26:45.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in smaregi_app_market mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43993.md
CVE ID: CVE-2023-43994 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-16T19:11:34.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Cleaning_makotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43994.md
CVE ID: CVE-2023-43995 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-20T19:23:12.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43995.md
CVE ID: CVE-2023-43996 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-20T19:23:53.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43996.md
CVE ID: CVE-2023-43997 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-20T19:24:39.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43997.md
CVE ID: CVE-2023-43998 State: PUBLISHED Published: 2024-01-24T00:00:00 Last Updated: 2024-09-03T20:02:12.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43998.md
CVE ID: CVE-2023-43999 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-11T16:50:31.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43999.md
CVE ID: CVE-2023-44000 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-11T20:26:04.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-44000.md
CVE ID: CVE-2023-44001 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-05-30T14:17:31.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-44001.md
CVE ID: CVE-2023-44002 State: REJECTED Published: N/A Last Updated: 2023-10-29T23:07:12.456049 Description: No description available.
CVE ID: CVE-2023-44008 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:13:27.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manager function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44008
CVE ID: CVE-2023-44009 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T15:53:23.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the Skin Management function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mojoportal.com/ - https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44009
CVE ID: CVE-2023-44011 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:29:08.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44011
CVE ID: CVE-2023-44012 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:26:27.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Vietsunshine-Electronic-Solution-JSC/Vulnerability-Disclosures/tree/main/2023/CVE-2023-44012
CVE ID: CVE-2023-44013 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:19:05.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/0/0.md
CVE ID: CVE-2023-44014 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:18:54.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/1/0.md
CVE ID: CVE-2023-44015 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:14:02.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/8/0.md
CVE ID: CVE-2023-44016 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:18:32.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/7/0.md
CVE ID: CVE-2023-44017 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:18:15.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/6/0.md