Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-51018 State: PUBLISHED Published: 2023-12-22T00:00:00.000Z Last Updated: 2025-04-17T20:30:41.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setWiFiApConfig-opmode/
CVE ID: CVE-2023-51019 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-key5g/
CVE ID: CVE-2023-51020 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-11-26T16:03:49.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setLanguageCfg-langType/
CVE ID: CVE-2023-51021 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setRptWizardCfg-merge/
CVE ID: CVE-2023-51022 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setLanguageCfg-langFlag/
CVE ID: CVE-2023-51023 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031NTPSyncWithHost-host_time/
CVE ID: CVE-2023-51024 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setNtpCfg-tz/
CVE ID: CVE-2023-51025 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-09-12T12:40:35.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setPasswordCfg-admuser/
CVE ID: CVE-2023-51026 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-27T20:11:53.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setRebootScheCfg-hour/
CVE ID: CVE-2023-51027 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliAuthMode/
CVE ID: CVE-2023-51028 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/2/3/TOTOlinkEX1800T_V9.1.0cu.2112_B20220316setWiFiExtenderConfig-apcliChannel/
CVE ID: CVE-2023-51033 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_setOpModeCfg/
CVE ID: CVE-2023-51034 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-09-09T20:50:07.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_UploadFirmwareFile/
CVE ID: CVE-2023-51035 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_NTPSyncWithHost/
CVE ID: CVE-2023-51042 State: PUBLISHED Published: 2024-01-23T00:00:00 Last Updated: 2024-10-03T20:40:38.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12 - https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628
CVE ID: CVE-2023-51043 State: PUBLISHED Published: 2024-01-23T00:00:00 Last Updated: 2024-08-29T14:28:09.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/4e076c73e4f6e90816b30fcd4a0d7ab365087255 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.5
CVE ID: CVE-2023-51048 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T22:23:44.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.notion.so/scms5-0-sql-injection-94c791a563d1481a9439fa98a1bc9a1b
CVE ID: CVE-2023-51049 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T22:23:44.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.notion.so/scms5-0-sql-injection-94c791a563d1481a9439fa98a1bc9a1b
CVE ID: CVE-2023-51050 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T22:23:44.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.notion.so/scms5-0-sql-injection-94c791a563d1481a9439fa98a1bc9a1b
CVE ID: CVE-2023-51051 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-27T18:43:09.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.notion.so/scms5-0-sql-injection-94c791a563d1481a9439fa98a1bc9a1b
CVE ID: CVE-2023-51052 State: PUBLISHED Published: 2023-12-21T00:00:00.000Z Last Updated: 2025-04-24T14:54:11.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.notion.so/scms5-0-sql-injection-94c791a563d1481a9439fa98a1bc9a1b
CVE ID: CVE-2023-51059 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-11-04T18:20:43.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mokosmart.com/wp-content/uploads/2019/10/GS-gateway.pdf - https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220120-01_MOKOSmart_MKGW1_Gateway_Improper_Session_Management
CVE ID: CVE-2023-51062 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-16T19:06:22.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51062.md
CVE ID: CVE-2023-51063 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-03T14:03:11.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulnerability within the component qnme-ajax?method=tree_level. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51063.md
CVE ID: CVE-2023-51064 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-20T16:47:15.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=tree_table. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51064.md
CVE ID: CVE-2023-51065 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-16T19:03:46.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51065.md
CVE ID: CVE-2023-51066 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-06T20:06:51.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51066.md
CVE ID: CVE-2023-51067 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-16T18:44:45.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51067.md
CVE ID: CVE-2023-51068 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-03T14:03:06.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51068.md
CVE ID: CVE-2023-51070 State: PUBLISHED Published: 2024-01-13T00:00:00 Last Updated: 2024-08-30T19:07:38.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51070.md
CVE ID: CVE-2023-51071 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-03T14:02:59.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51071.md
CVE ID: CVE-2023-51072 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-16T18:57:09.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated user to execute arbitrary JavaScript code on behalf of other users, including the administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nagios.com/products/security/
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nagios.com/products/security/#nagios-xi
CVE ID: CVE-2023-51073 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-06T20:17:14.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalotech.com - https://github.com/christopher-pace/CVE-2023-51073/
CVE ID: CVE-2023-51074 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-08-02T22:32:08.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/json-path/JsonPath/issues/973
CVE ID: CVE-2023-51075 State: PUBLISHED Published: 2023-12-27T00:00:00.000Z Last Updated: 2025-04-17T20:34:41.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hutool/issues/3421
CVE ID: CVE-2023-51079 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-08-02T22:32:09.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because "the only thing that you could expect is that the parser will take a crazy amount of time to complete its task." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mvel/mvel/issues/348 - https://github.com/mvel/mvel/issues/348#issuecomment-1874047271
CVE ID: CVE-2023-51080 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-08-02T22:32:09.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dromara/hutool/issues/3423
CVE ID: CVE-2023-51084 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-09-11T20:16:56.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PoppingSnack/VulReport/issues/12
CVE ID: CVE-2023-51090 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/M3/getWeiXinConfig/M3_getWeiXinConfig.md
CVE ID: CVE-2023-51091 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/M3/cookie/M3_cookie.md
CVE ID: CVE-2023-51092 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-09-09T18:33:49.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GD008/TENDA/blob/main/M3/upgrade/M3_upgrade.md
CVE ID: CVE-2023-51093 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:08.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/M3/setVlanInfo/M3_setVlanInfo.md
CVE ID: CVE-2023-51094 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:08.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/M3/telnet/M3_telnet.md
CVE ID: CVE-2023-51095 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:08.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/M3/delWlPolicyData/M3_delWlPolicyData.md
CVE ID: CVE-2023-51097 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-11-26T14:51:58.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GD008/TENDA/blob/main/W9/W9_setAutoPing/W9_setAutoPing.md
CVE ID: CVE-2023-51098 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/W9/W9_setDiagnoseInfo/W9_setDiagnoseInfo.md
CVE ID: CVE-2023-51099 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:08.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/W9/W9_execommand/W9_execommand.md
CVE ID: CVE-2023-51100 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T22:32:09.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/W9/W9_getDiagnoseInfo/W9_getDiagnoseInfo.md