Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-45538 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:08:40.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/35
CVE ID: CVE-2022-45539 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:07:28.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/38
CVE ID: CVE-2022-45540 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:05:47.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/37
CVE ID: CVE-2022-45541 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:04:37.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/36
CVE ID: CVE-2022-45542 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:59:41.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/33
CVE ID: CVE-2022-45543 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:58:10.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://srpopty.github.io/2023/02/15/Vulnerability-Discuz-X3.4-Reflected-XSS-%28CVE-2022-45543%29/
CVE ID: CVE-2022-45544 State: PUBLISHED Published: 2023-02-07T00:00:00 Last Updated: 2024-08-03T14:17:03.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and execute arbitrary code via the tristao parameter. NOTE: this is disputed by the vendor because an admin is intentionally allowed to upload new executable PHP code, such as a theme that was obtained from a trusted source or was developed for their own website. Only an admin can upload such code, not someone else in an "attacker" role. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
, not someone else in an "attacker" role. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.schlix.com/ - https://blog.tristaomarinho.com/schlix-cms-2-2-7-2-arbitrary-file-upload/ - https://www.schlix.com/downloads/schlix-cms/schlix-cms-v2.2.7-2.zip - https://github.com/tristao-marinho/CVE-2022-45544/blob/main/README.md
CVE ID: CVE-2022-45546 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:56:44.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgnas.gitbook.io/cve-2022-45546/
CVE ID: CVE-2022-45548 State: PUBLISHED Published: 2022-12-06T00:00:00.000Z Last Updated: 2025-04-23T14:30:13.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/loadream/AyaCMS/issues/4
CVE ID: CVE-2022-45550 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T17:30:48.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/KrkEVb29pwsxZ6AJ - https://github.com/loadream/AyaCMS/issues/8
CVE ID: CVE-2022-45551 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-18T15:56:29.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://shenzhen.com - http://zbt.com - https://blog.prodefense.io/zbt-we1626-wireless-router-cve-disclosures-b3534484d97d
CVE ID: CVE-2022-45552 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T17:20:15.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to obtain sensitive information via SPI bus interface connected to pinout of the NAND flash memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://shenzhen.com - http://zbt.com - https://blog.prodefense.io/zbt-we1626-wireless-router-cve-disclosures-b3534484d97d
CVE ID: CVE-2022-45553 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T17:17:14.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the UART port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://shenzhen.com - http://zbt.com - https://blog.prodefense.io/zbt-we1626-wireless-router-cve-disclosures-b3534484d97d
CVE ID: CVE-2022-45557 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:57:59.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via file names. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundredrabbits/Left/issues/167
CVE ID: CVE-2022-45558 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:25:54.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hundredrabbits/Left/issues/168
CVE ID: CVE-2022-45562 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:54:06.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high privilege to access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cyber-guy.gitbook.io/cyber-guys-blog/pocs/cve-2022-45562
CVE ID: CVE-2022-45564 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-17T17:03:31.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/catwj/exp/blob/main/Injected%20by%20Shanghai%20Zhuangmeng%20Information%20Technology%20Co.%2C%20Ltd.md
CVE ID: CVE-2022-45582 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-08-03T14:17:03.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/horizon/+bug/1982676 - https://github.com/openstack/horizon/blob/master/horizon/workflows/views.py#L96-L102 - https://lists.debian.org/debian-lts-announce/2023/11/msg00033.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00000.html
CVE ID: CVE-2022-45586 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:55:29.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?t=42361
CVE ID: CVE-2022-45587 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:54:02.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.xpdfreader.com/viewtopic.php?t=42361
CVE ID: CVE-2022-45588 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T15:43:47.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks. Users should download the R2022-09 release or later and use it in place of the previous version. Talend Remote Engine Gen 1 and Talend Cloud Engine for Design are not impacted. This XXE vulnerability could only be exploited by someone with the appropriate rights to edit pipelines on the Talend platform. It could not be triggered remotely or by other user input. Additional Analyst Notes: -
ipelines on the Talend platform. It could not be triggered remotely or by other user input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://talend.com - https://www.talend.com/security/incident-response/#CVE-2022-45588
CVE ID: CVE-2022-45589 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T19:41:05.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use it in place of the previous version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://talend.com - https://www.talend.com/security/incident-response/#CVE-2022-45588
CVE ID: CVE-2022-45597 State: PUBLISHED Published: 2023-03-24T00:00:00 Last Updated: 2024-08-03T14:17:03.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability because the report is only about use of certificates at the application layer (not the transport layer) and "Certificates are exchanged in a controlled fashion between entities within a trust relationship. This is why self-signed certificates may be used and why validating certificates isn’t as important as doing so for the transport layer certificates." Additional Analyst Notes: - CVE Program Container: Refe
as important as doing so for the transport layer certificates." Additional Analyst Notes: - CVE Program Container: References: - http://componentspace.com - http://componentspacesaml2.com - https://www.componentspace.com/documentation/saml-for-asp-net-core/ComponentSpace%20SAML%20for%20ASP.NET%20Core%20Release%20Notes.pdf
CVE ID: CVE-2022-45598 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:27:57.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/laurent22/joplin/commit/a2de167b95debad83a0f0c7925a88c0198db812e - https://github.com/laurent22/joplin/releases/tag/v2.9.17
CVE ID: CVE-2022-45599 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-17T18:26:35.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regarding a given accounts hashed password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ethancunt/CVE-2022-45599
CVE ID: CVE-2022-45600 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-17T18:27:12.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ethancunt/CVE-2022-45600
CVE ID: CVE-2022-45608 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:53:49.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ThingsBoard 3.4.1, allows low privileged attackers (CUSTOMER_USER) to gain escalated privileges (vertically) and become an Administrator (TENANT_ADMIN) or (SYS_ADMIN) on the web application. It is important to note that in order to accomplish this, the attacker must know the corresponding API's parameter (authority : value). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://thingsboard.com - https://wiki.wizard32.net/en/blog/access-control-vulnerab
CISA ADP Vulnrichment: References: - http://thingsboard.com - https://wiki.wizard32.net/en/blog/access-control-vulnerability-ThingsBoard
CVE ID: CVE-2022-45611 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-11-27T14:25:21.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via capture of user login information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fresenius-kabi.com/de-at/produkte/pharmahelp-compounder - https://www.fresenius.com/sites/default/files/2023-11/Fresenius%20-%20CVE-2022-45611.pdf - https://www.fresenius.com/sites/default/files/2023-12/Fresenius%20-%20CVE-2022-45611.pdf
CVE ID: CVE-2022-45613 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-04T17:27:26.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40just0rg/book-store-management-system-1-0-unrestricted-input-leads-to-xss-74506d42492e - https://github.com/lithonn/bug-report/tree/main/vendors/o
ment-system-1-0-unrestricted-input-leads-to-xss-74506d42492e - https://github.com/lithonn/bug-report/tree/main/vendors/oretnom23/bsms_ci/stored-xss
CVE ID: CVE-2022-45614 State: REJECTED Published: N/A Last Updated: 2023-01-11T00:00:00 Description: No description available.
CVE ID: CVE-2022-45634 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T16:17:55.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain access to sensitive account information Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.withsecure.com/advisories/username-disclosure-vulnerability-in-dbd--application-used-by-me - https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45634
CVE ID: CVE-2022-45635 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:42:29.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45635
CVE ID: CVE-2022-45636 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:39:40.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) without authorization via arbitrary API requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.withsecure.com/advisories/insecure-authorization-scheme-for-api-requests-in-dbd--mobile-co - https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45636
CVE ID: CVE-2022-45637 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T18:38:00.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45637
CVE ID: CVE-2022-45639 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T14:57:34.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a crafted value to the m parameter. NOTE: third parties have disputed this because there is no analysis showing that the backtick command executes outside the context of the user account that entered the command line. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.binaryworld.it/ - https://www.binaryworld.it/guidepoc.asp#CVE-2022-45639 - http://packetstor
t: References: - http://www.binaryworld.it/ - https://www.binaryworld.it/guidepoc.asp#CVE-2022-45639 - http://packetstormsecurity.com/files/171649/Sleuthkit-4.11.1-Command-Injection.html
CVE ID: CVE-2022-45640 State: PUBLISHED Published: 2022-12-01T00:00:00.000Z Last Updated: 2025-04-24T20:07:40.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6v1.0_vuln/Tenda%20AC6V1.0%20V15.03.05.19%20Stack%20overflow%20vulnerability.md - https://vulncheck.com/blog/xiongmai-iot-exploitation
CVE ID: CVE-2022-45641 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:50:53.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6/formSetMacFilterCfg/formSetMacFilterCfg.md
CVE ID: CVE-2022-45643 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:49:20.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the addWifiMacFilter function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6/addWifiMacFilter_deviceId/addWifiMacFilter_deviceId.md
CVE ID: CVE-2022-45644 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:47:03.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceId parameter in the formSetClientState function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6/formSetClientState_deviceId/formSetClientState_deviceId.md
CVE ID: CVE-2022-45645 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T14:20:05.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the deviceMac parameter in the addWifiMacFilter function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6/addWifiMacFilter_deviceMac/addWifiMacFilter_derviceMac.md
CVE ID: CVE-2022-45646 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:45:21.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeedUp parameter in the formSetClientState function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6/formSetClientState_limitSpeedUp/formSetClientState_limitSpeed.md
CVE ID: CVE-2022-45647 State: PUBLISHED Published: 2022-12-02T00:00:00.000Z Last Updated: 2025-04-24T13:42:43.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the limitSpeed parameter in the formSetClientState function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_ac6/formSetClientState_limitSpeed/formSetClientState_limitSpeed.md